Cybersecuritynews
AuraStealer Infostealer Emerges with 48 C2 Domains Targeting Users
First seen 3 Mar 2026, 06:10 UTC
•
•49.4
Export
Article Content
Browse articles
AuraStealer, a new infostealer malware, has been active since mid-2025, developed by a group of Russian-speaking individuals. It was first introduced on underground forums in July 2025 and is currently utilizing 48 command and control (C2) domains in ongoing campaigns to target users.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2025-01-01
Lumma stealer infrastructure disruption occurred
2025-07-01
AuraStealer first appeared on underground hacker forums
2026-03-03
AuraStealer reported in cybersecurity news articles
More articles in this cluster
Continue Reading
CVE-2026-2441: Zero-Day CSS Vulnerability in Chromium-Based Browsers
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
GRU Compromises Home Routers in 23 States to Steal Outlook Credentials
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign