Skip to content
Mars Stealer Malware Targets Crypto Wallets with New Tactics

Mars Stealer Malware Targets Crypto Wallets with New Tactics

First seen 21 Oct 2026, 09:16 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 10:17 UTC
  • •Mars Stealer malware can bypass 2FA and targets browser-based crypto wallets.
  • •A Florida man was arrested for injecting this malware into free games on Steam.
  • •The malware has already stolen over $220,000 from approximately 8,000 victims.

Mars Stealer, a new iteration of the Oski Trojan, is actively targeting browser-based cryptocurrency wallets. It can bypass two-factor authentication (2FA) and is available for purchase on the Dark Web for under $200. The malware can extract sensitive information such as crypto addresses and private keys from compromised devices. Recent incidents have shown that a Florida man, Zyaire Wilkins, injected this malware into free games on Steam, affecting around 8,000 devices and stealing over $220,000 in cryptocurrencies. The FBI arrested Wilkins and his accomplices in July 2026 after tracking on-chain transactions back to them. The malware is particularly dangerous as it can uninstall itself if it detects a device from certain countries, evading detection. Security experts warn that users must remain vigilant against such threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-07-01
FBI arrests malware operators
Zyaire Wilkins and accomplices were arrested for injecting malware into Steam games, leading to significant crypto theft.
Hackernoon

More articles in this cluster (3)

Following this threat?

Track Mars Stealer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How does Mars Stealer operate?
Mars Stealer can infiltrate devices through free downloads, phishing emails, and compromised websites, extracting sensitive crypto data.
Who is at risk from this malware?
Anyone using browser-based cryptocurrency wallets is at risk, especially those who do not employ strong security measures.
What should users do to protect themselves?
Users should avoid downloading software from untrusted sources and consider using hardware wallets for better security.