Loading malware…
Pinch, also known as LdPinch, is credential-stealing malware that harvests authentication information from compromised systems. Its defining capability is credential theft; specific infection vectors, targeted industries, and threat-actor associations are not established.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Mentioned only as an antivirus detection name applied to the sample, not as the actual malware under analysis.
Credential-stealing malware whose source code is believed to underpin PinchDuke's credential-theft functionality.
Credential-stealing malware mentioned as the suspected source-code basis for PinchDuke's credential-theft functionality.
Credential stealing malware referenced as the source-code basis for PinchDuke's credential theft functionality.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.