{
  "family": "razy",
  "sample_count": 3391,
  "category": "infostealer",
  "description": "Razy is a generic trojan classification used by Kaspersky and several other AV vendors for samples that exhibit malicious behavior but do not match a more specific family signature. Razy detections often correspond to dropper, downloader, or info-stealer behavior and warrant further analysis for definitive attribution.",
  "cta": "If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance.",
  "aliases": [],
  "enrichment_level": "hand-curated",
  "faq": [
    {
      "@type": "Question",
      "name": "What is Razy?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Razy is a generic trojan classification used by Kaspersky and several other AV vendors for samples that exhibit malicious behavior but do not match a more specific family signature. Razy detections often correspond to dropper, downloader, or info-stealer behavior and warrant further analysis for definitive attribution."
      }
    },
    {
      "@type": "Question",
      "name": "How does Razy spread?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Razy is a browser-targeting infostealer distributed through cracked software downloads and malicious browser extension stores."
      }
    },
    {
      "@type": "Question",
      "name": "What are the signs of a Razy infection?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Unauthorized browser extensions, cryptocurrency wallet address substitution in copy-paste, and AV detections for Razy are diagnostic."
      }
    },
    {
      "@type": "Question",
      "name": "What should I do if I think I have Razy on my system?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance."
      }
    }
  ],
  "faq_count": 4,
  "mitre_attack": [],
  "cisa_advisory": null,
  "last_updated": "2026-05-27"
}