SourTrade

☆ pin

Also known as WEEVILPROXY, MeadowLocust

Reports

First seen

Jul 25, 2026

Last seen

Sep 7, 2026

Motivation

Financial

Targeting

Sectors

Financial Services ×2 Technology ×1

Top ATT&CK techniques

T1204 User Execution ×3T1566 Phishing ×3T1555 Credentials from Password Stores ×2T1056 Input Capture ×2T1027 Obfuscated Files or Information ×1T1113 Screen Capture ×1T1041 Exfiltration Over C2 Channel ×1T1090 Proxy ×1T1656 Impersonation ×1T1547 Boot or Logon Autostart Execution ×1T1005 Data from Local System ×1T1105 Ingress Tool Transfer ×1

Indicators

filename ×4domain ×1

Indicator values are available on Pro and via the API.

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Top ATT&CK techniques

Indicators

Recent reports

JSCeal Malware Bypasses Google Authentication Using Stolen Session Cookies

SourTrade Malvertising Uses Browser-Side Assembly to Evade Detection

Malvertising Campaign Uses In-Browser JavaScript to Assemble Malware in Memory