Talk about coal in your stocking - SantaStealer malware steals data from browsers and crypto wallets

• SantaStealer targets browsers, wallets, messaging apps, documents, and desktop screenshots
• Fourteen modules extract data simultaneously through separate execution threads
• Execution delays are used to reduce immediate user suspicion

Experts have warned of a new malware strain dubbed SantaStealer which offers information theft capabilities through a malware-as-a-service model.

Rapid7 researchers (via BleepingComputer), the operation is a rebranded version of BluelineStealer, with activity traced to Telegram channels and underground forums.

Access is sold through monthly subscriptions priced at $175 and $300, placing the tool within reach of lower-tier cybercriminals rather than advanced operators.

SantaStealer threat

SantaStealer is built around fourteen separate data collection modules, each ...