OtterCookie Node.js Backdoor Credential Harvesting

Georg Lauenstein@gsec

•updated Mar 16, 2026•1•0•47

Detects Node.js processes performing credential enumeration with patterns matching OtterCookie backdoor behavior targeting wallets, passwords, and keys.