This dangerous malware is written in Visual Basic 6.0, and costs less than a PS5 game — but poses a very real threat to your business

• $30 DarkCloud infostealer quietly harvests credentials across browsers and enterprise software
• Legacy Visual Basic code is unexpectedly helping malware evade some modern detection tools
• Cheap credential-stealing tools are increasingly driving early-stage corporate network compromises

Low-cost malware tools are increasingly available on the dark web, offering credential theft capabilities to individuals with limited technical knowledge.

Security researchers at Flashpoint recently analyzed a malware strain known as DarkCloud, which has circulated via Telegram channels and public storefronts since approximately 2022.

Available for roughly $30, less than the price of many console games, the tool performs large-scale credential harvesting, with stolen information may include browser logins, cookies, financial data, and contact information from email applications.

Article continues below