ExelaStealer steals a wide range of data by pretending to be PDF documents

Carding 4 Carders

Professional
Messages
2,728
Reaction score
1,574
Points
113
An entrance ticket to the world of cybercrime costs only $ 20.

The new data thief ExelaStealer recently added to the arsenal of hackers aimed at stealing confidential information from infected Windows systems. According to James Slaughter , a researcher at FortiGuard Labs, ExelaStealer is an open-source infowork with paid settings that is supported by most groups of cybercriminals.

The program, written in Python with JavaScript support, can steal passwords, Discord tokens, credit cards, cookies and session data, keystrokes, clipboard contents, and take screenshots of running applications.

ExelaStealer is sold on cybercrime forums and through a dedicated Telegram channel. Its creators use the alias quicaxd. The paid version costs $20 for one month, $45 for three months, or $120 for a permanent license.

The low cost of the program makes it an excellent tool for beginners in the field of hacking, which lowers the entry threshold for malicious attacks.

There is evidence that ExelaStealer gets to victims computers via an executable file that disguises itself as a PDF document, but the malware is hardly limited to this delivery method.

The researchers found that when running the fake PDF file they reviewed, a document is displayed in the foreground — a Turkish certificate of registration of the Dacia Duster car, while the infostealer acts in the background.

"Data has become a valuable currency, and for this reason, attempts to collect it are unlikely to ever stop," Slaughter explained.

Despite the diversity of data theft software, ExelaStealer shows that there is still room in the market for new players who can fill their niche.
 
Top