Since April 2023, a newly discovered malware called 'Mystic Stealer' has been making waves in the cybercrime community. This information-stealing malware has gained significant attention on hacking forums and darknet markets, garnering widespread interest and usage.
Available for a monthly rental fee of $150, Mystic Stealer is designed to target various web browsers, browser extensions, cryptocurrency applications, MFA and password management applications, cryptocurrency browser extensions, as well as credentials for platforms like Steam and Telegram. Its capabilities are extensive, allowing it to infiltrate and extract sensitive data from a wide range of sources.
The emergence of Mystic Stealer has prompted simultaneous reports from prominent cybersecurity firms. In a joint report by InQuest and Zscaler, experts express concern about the sophistication of this malware and the alarming increase in its sales. It is evident that numerous new campaigns exploiting Mystic Stealer are being launched, signaling a growing threat to individuals and organizations alike.