ThreatCluster

StealC Malware Control Panel Flaw Exposes Attacker Details

First seen 19 Jan 2026, 18:31 UTC •GbhackersSecurityaffairs.Co •36

Article Content

Browse articles
ThreatCluster

Researchers identified an XSS vulnerability in the control panel of StealC malware, which has been operational since at least 2023. This infostealer, sold as Malware-as-a-Service, allows attackers to steal sensitive information like cookies and passwords. The flaw has led to the exposure of key details about the threat actor behind the malware.

How this analysis works

Extracted Entities

1 / 2