Stealc Stealer: New Malware Threats Emerge

• •Stealc is a non-resident information stealer targeting Windows systems.
• •It has been sold as Malware-as-a-Service since January 2023.
• •The malware collects data from web browsers and cryptocurrency wallets.

Stealc is a new information stealer malware that has been sold as Malware-as-a-Service since January 9, 2023. It primarily targets Windows systems, stealing data from web browsers, cryptocurrency wallets, and other applications. The malware is advertised by its presumed developer, Plymouth, on Russian-speaking underground forums. It is designed to be non-resident, meaning it executes its tasks and then leaves the infected system. The malware collects sensitive data using several legitimate third-party DLLs and exfiltrates it to its command and control (C2) server. Security professionals are advised to treat any encounters with Stealc as serious, as it can compromise saved passwords and login sessions. The articles report that the malware is actively being used in the wild, with no specific patches or fixes mentioned yet. Current status indicates a growing concern among cybersecurity experts regarding its impact.