Skip to content
CybercrimeFinancialAdvanced sophistication

WraithTools

WraithTools is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 4 sectors, including Technology and Finance. It uses 11 MITRE ATT&CK techniques.

Techniques
11
Exploited CVEs
No CVE data
Record updated

Who They Target.

About WraithTools.

Threat actor operating in the cybercriminal underground, responsible for developing and selling the x47.c Windows botnet, which features AI API credit draining and AI-assisted persistence.

Last updated Sep 27, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.