Agent Tesla
Keylogger + info stealer
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:12:23.328Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:12:23.328Z · Confidence: high
Security Timeline
- discovered Agent Tesla first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Agent Tesla is a long-lived .NET keylogger/stealer commonly delivered via phishing documents. (attributes recorded from Researchers).
Definition
Agent Tesla is a long-lived .NET keylogger/stealer commonly delivered via phishing documents.
Overview
Agent Tesla is a long-lived .NET keylogger/stealer commonly delivered via phishing documents.
Behavior
- .NET keylogger
- distributed via malspam
First Seen
2014-07
Target
Keylogger + info stealer
Malware Intelligence
Family: Agent Tesla
Techniques: T1056, T1113
Targets: Keylogger + info stealer
Behavior:
- .NET keylogger
- distributed via malspam
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.