Back Gbhackers

AuraStealer Infostealer Targeting Users with 48 C2 Domains in Ongoing Campaigns

Gbhackers •Mayura Kathir • March 3, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AuraStealer Infostealer Emerges with 48 C2 Domains Targeting Users AuraStealer, a new infostealer malware, has been active since mid-2025, developed by a group of Russian-speaking individuals. It was first introduced on underground forums in July 2025 and is currently utilizing 48 command and control (C2) domains in ongoing campaigns to target users. 3 sources 49

Extracted Entities

AuraStealer Infostealer Targeting Users with 48 C2 Domains in Ongoing Campaigns

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)