The report analyzes CosmicDuke, a malware that combines code from the MiniDuke APT trojan and the Cosmu family. It searches for and harvests login details from various programs and sends the data to remote servers. The malware is capable of stealing information from the system and downloading and executing other malware. F-Secure has detections for all the malicious components used by the Cosmu variants.