# PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

DevFeed: [PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting](<https://devfeed.tech/articles/phantomraven-an-llm-generated-information-stealer-developed-for-bug-bounty-hunting-30904.md>)

Original publisher: [Read original article](<https://www.crowdstrike.com/en-us/blog/phantomraven-llm-generated-information-stealer-for-bug-bounty-hunting/>)

Author: Maddie Stewart

Published: 2026-09-16T13:36:43.658349Z

Content type: news

Language: en

Sources: [Blog](<https://devfeed.tech/sources/blog.md>)

Topics: [Malware](<https://devfeed.tech/topics/malware.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Bug Bounty](<https://devfeed.tech/topics/bugbounty.md>)

Tags: [bug-bounty](<https://devfeed.tech/tags/bug-bounty.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [llm](<https://devfeed.tech/tags/llm.md>), [malware](<https://devfeed.tech/tags/malware.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [threat-hunting-intel](<https://devfeed.tech/tags/threat-hunting-intel.md>)

## AI overview

CrowdStrike reports that a financially motivated bug bounty hunter developed and distributed PhantomRaven, a JavaScript-based information stealer through npm. The company assesses with high confidence that a large language model was used to write the malware and says the operator likely used it to identify bug bounty opportunities.

## Source excerpt

CrowdStrike identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript-based information stealer PhantomRaven.