StealC Malware Control Panel Exploited by Researchers

Researchers exploited a cross-site scripting (XSS) vulnerability in the control panel of the StealC info-stealing malware, allowing them to monitor active sessions and gather data on the attackers' hardware. StealC, which surfaced in early 2023, gained traction through aggressive promotion on dark web channels and has been known for its data theft capabilities. The malware has undergone several enhancements, including a version 2.0 released in April 2025.