Scmagazine SantaStealer Malware-as-a-Service Launching This Holiday Season
Article Content
Browse articles 
A new malware-as-a-service called SantaStealer, previously known as BluelineStealer, is set to launch before the end of 2025. Advertised on Telegram and hacker forums, SantaStealer is designed to collect sensitive information, including credentials and cryptocurrency wallet data, and operates in memory to evade detection. The service is reportedly offered by a Russian-speaking developer for a subscription fee.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track Blueline Stealer and CVE-2025-8088 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating… 
Path Traversal Vulnerability in WinRAR Exploited by RomCom Group CVE-2025-8088 is a path traversal vulnerability in WinRAR versions up to 7.12, allowing attackers to exploit alternate data streams (ADSes) in RAR files to extract malicious payloads to sensitive system locations. Exploitation began in the wild on July 18, 2025, with attackers linked to the Russia-aligned RomCom…