KuinaExtractor Uses Telegram Exfiltration, UAC Bypass, and Sandbox Detection for Stealth

Cybersecuritynews •Tushar Subhra Dutta • June 26, 2026

A newly uncovered infostealer called KuinaExtractor has been quietly evolving for over six months, posing a serious and growing threat to users across multiple platforms. Written in the Rust programming language, the malware targets browser data, cryptocurrency wallets, and credentials for popular services including Roblox, Steam, and Discord. What makes this threat particularly concerning is […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

KuinaExtractor Infostealer Targets Browser Data and Crypto Wallets The newly identified KuinaExtractor infostealer, written in Rust, has been evolving for over six months and poses a significant threat to users across various platforms. It targets sensitive data, including browser information, cryptocurrency wallets, and credentials for popular services like Roblox, Steam, and Discord. The malware employs advanced techniques such as Telegram for data exfiltration, User Account Control (UAC) bypass, and sandbox detection to enhance its stealth capabilities. Analysis indicates a single-operator lineage with a focus on concealment rather than new features. The ongoing threat is compounded by its ability to affect a wide range of users, making it a growing concern in the cybersecurity landscape. 2 sources 65

Extracted Entities

KuinaExtractor Uses Telegram Exfiltration, UAC Bypass, and Sandbox Detection for Stealth

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)