A harmful computer virus called StealC has recently been updated. It is now harder to detect and better at stealing personal data from users. This malware has been around for a few years, but its latest version makes it even more of a threat.
What is StealC?
StealC is a type of malicious software known as an "info-stealer." It is designed to sneak into your computer, steal personal data like saved passwords and cookies, and even help other harmful programs get inside. It became popular on hacker forums in 2023, with access sold for about $200 per month.
In 2024, it was widely used in fake online ads. Some attacks locked devices into a mode where users could not do anything except follow the attacker's instructions. This showed how advanced and harmful StealC could be.
Later that year, it was discovered that the malware could get around new security features in Google Chrome. These protections were meant to stop attackers from stealing browser cookies, but StealC found a way to bypass them and steal old cookies to hijack Google accounts.
What's New in the 2025 Version
A fresh version of StealC was released to cybercriminals in March 2025. Since then, a few more updates have improved it even further. Experts who studied it found several key changes:
1. It can now install itself using different types of files, such as .exe programs, PowerShell commands, and software installers.
2. The new version uses strong encryption to hide its activity, making it harder for security tools to notice.
3. It now works better on modern computers and can delete itself after stealing data, leaving fewer traces behind.
4. Hackers can use built-in tools to adjust what kind of data StealC should look for.
5. It can even take screenshots of what’s on your screen, even if you use more than one monitor.
6. Alerts can be sent directly to hackers through the Telegram messaging app.
However, some older features were removed. For example, it no longer checks for virtual machines or downloads certain file types. Experts think this may be temporary and those features could return in later updates.
How It's Being Spread
StealC is now being spread using other malware. One example is Amadey, which helps deliver StealC to victims’ devices. Different attackers may use different methods depending on their goals.
How to Stay Protected
To avoid falling victim to malware like StealC:
• Avoid saving sensitive data like passwords in your browser.
• Turn on two-factor authentication for your accounts.
• Never download pirated software or apps from shady websites.
Cyberattacks are always evolving, so it’s important to stay informed and cautious while online.