A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.
New SantaStealer malware steals data from browsers, crypto wallets
A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.
www.bleepingcomputer.com
December 15, 2025 at 10:43 PM
A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.
-DDoSia now runs ephemeral C2 infrastructure
-Malware hits RuTube
-New GhostPairing technique hits WhatsApp
-Chrome extension steals AI prompts
-Parked domains are used for malvertising
-Malware reports: Frogblight, Makop, The Gentlemen, Cellik, NexusRoute, DarkGate, ZnDoor, SantaStealer
-Malware hits RuTube
-New GhostPairing technique hits WhatsApp
-Chrome extension steals AI prompts
-Parked domains are used for malvertising
-Malware reports: Frogblight, Makop, The Gentlemen, Cellik, NexusRoute, DarkGate, ZnDoor, SantaStealer
December 17, 2025 at 10:18 AM
-DDoSia now runs ephemeral C2 infrastructure
-Malware hits RuTube
-New GhostPairing technique hits WhatsApp
-Chrome extension steals AI prompts
-Parked domains are used for malvertising
-Malware reports: Frogblight, Makop, The Gentlemen, Cellik, NexusRoute, DarkGate, ZnDoor, SantaStealer
-Malware hits RuTube
-New GhostPairing technique hits WhatsApp
-Chrome extension steals AI prompts
-Parked domains are used for malvertising
-Malware reports: Frogblight, Makop, The Gentlemen, Cellik, NexusRoute, DarkGate, ZnDoor, SantaStealer
Repéré en promotion sur Telegram et de nombreux forums pirates, SantaStealer est désormais « production-ready ». Le risque de ce nouveau logiciel pirate tient à son modèle SaaS et à une exécution entièrement en mémoire. www.zataz.com/santastealer...
ZATAZ » SantaStealer sort de l’ombre, un outil pirate qui a de la mémoire
www.zataz.com
January 10, 2026 at 12:53 PM
Repéré en promotion sur Telegram et de nombreux forums pirates, SantaStealer est désormais « production-ready ». Le risque de ce nouveau logiciel pirate tient à son modèle SaaS et à une exécution entièrement en mémoire. www.zataz.com/santastealer...
SantaStealer Attacks Users to Exfiltrates Sensitive Documents, Credentials, and Wallet Data
SantaStealer Attacks Users to Exfiltrates Sensitive Documents, Credentials, and Wallet Data
cybersecuritynews.com
December 16, 2025 at 11:46 AM
SantaStealer Attacks Users to Exfiltrates Sensitive Documents, Credentials, and Wallet Data
--SantaStealer MaaS pushed on forums and Telegram,
--Watchdog warns UK is dragging its heels in branding China as a threat,
--New MI6 head warns that the frontline is everywhere,
--Google to cease its Dark Web Report in February,
--SoundCloud confirms a security breach, 3/5
--Watchdog warns UK is dragging its heels in branding China as a threat,
--New MI6 head warns that the frontline is everywhere,
--Google to cease its Dark Web Report in February,
--SoundCloud confirms a security breach, 3/5
December 16, 2025 at 12:39 PM
--SantaStealer MaaS pushed on forums and Telegram,
--Watchdog warns UK is dragging its heels in branding China as a threat,
--New MI6 head warns that the frontline is everywhere,
--Google to cease its Dark Web Report in February,
--SoundCloud confirms a security breach, 3/5
--Watchdog warns UK is dragging its heels in branding China as a threat,
--New MI6 head warns that the frontline is everywhere,
--Google to cease its Dark Web Report in February,
--SoundCloud confirms a security breach, 3/5
SantaStealer stuffs credentials, crypto wallets into a brand new bag
SantaStealer bags credentials and crypto wallets
: All I want for Christmas … is all of your data
www.theregister.com
December 16, 2025 at 7:26 PM
SantaStealer stuffs credentials, crypto wallets into a brand new bag
Postřehy z bezpečnosti: vánočně laděný SantaStealer krade data
Postřehy z bezpečnosti: vánočně laděný SantaStealer krade data
Podíváme se na zneužívanou zranitelnost v Cisco Secure Email Gateway, výhrůžky zveřejnění dat uživatelů PornHubu skupinou ShinyHunters, zatčení osoby za instalaci malwaru na italském trajektu nebo nový malware SantaStealer.
www.root.cz
December 21, 2025 at 11:15 PM
Postřehy z bezpečnosti: vánočně laděný SantaStealer krade data
New Stealer in town: SantaStealer 🎅🎄
Botnet C2s ➡️all hosted at AS399486 VIRTUO 🇨🇦:
📡31.57.38.119:6767
📡31.57.38.244:6767
📡80.76.49.114:6767
Stealer admin panel (via @darkwebinformer.com 💪):
🕵️ stealer. su
Artifacts 💻:
C:\tempLog\Clipboard.txt
%LocalAppData%\Temp\passwordslog.txt
Botnet C2s ➡️all hosted at AS399486 VIRTUO 🇨🇦:
📡31.57.38.119:6767
📡31.57.38.244:6767
📡80.76.49.114:6767
Stealer admin panel (via @darkwebinformer.com 💪):
🕵️ stealer. su
Artifacts 💻:
C:\tempLog\Clipboard.txt
%LocalAppData%\Temp\passwordslog.txt
'Tis the season for a new infostealer: #SantaStealer. Active promotion on Telegram and underground forums state the malware-as-a-service plans to be released before year-end.
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums | Rapid7 Blog
Rapid7 Website
r-7.co
December 18, 2025 at 9:46 AM
New Stealer in town: SantaStealer 🎅🎄
Botnet C2s ➡️all hosted at AS399486 VIRTUO 🇨🇦:
📡31.57.38.119:6767
📡31.57.38.244:6767
📡80.76.49.114:6767
Stealer admin panel (via @darkwebinformer.com 💪):
🕵️ stealer. su
Artifacts 💻:
C:\tempLog\Clipboard.txt
%LocalAppData%\Temp\passwordslog.txt
Botnet C2s ➡️all hosted at AS399486 VIRTUO 🇨🇦:
📡31.57.38.119:6767
📡31.57.38.244:6767
📡80.76.49.114:6767
Stealer admin panel (via @darkwebinformer.com 💪):
🕵️ stealer. su
Artifacts 💻:
C:\tempLog\Clipboard.txt
%LocalAppData%\Temp\passwordslog.txt
Our @cyberalliance.bsky.social member @Rapid7 has identified a new malware-as-a-service information stealer being actively promoted through Telegram channels and underground hacker forums: www.rapid7.com/blog/post/tr...
#cybersecurity #cyberthreat #cyberesearch
#cybersecurity #cyberthreat #cyberesearch
SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums | Rapid7 Blog
Rapid7 Website
www.rapid7.com
December 22, 2025 at 12:00 PM
Our @cyberalliance.bsky.social member @Rapid7 has identified a new malware-as-a-service information stealer being actively promoted through Telegram channels and underground hacker forums: www.rapid7.com/blog/post/tr...
#cybersecurity #cyberthreat #cyberesearch
#cybersecurity #cyberthreat #cyberesearch
'Tis the season for a new infostealer: #SantaStealer. Active promotion on Telegram and underground forums state the malware-as-a-service plans to be released before year-end.
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums | Rapid7 Blog
Rapid7 Website
r-7.co
December 15, 2025 at 1:56 PM
'Tis the season for a new infostealer: #SantaStealer. Active promotion on Telegram and underground forums state the malware-as-a-service plans to be released before year-end.
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
Rapid7 Labs analyzed unstripped samples to detail how it operates and what defenders should know: https://r-7.co/4q5pk75
This holiday season, a new malware comes a-calling The Christmas-themed SantaStealer is just the tip of the iceberg... The post This holiday season, a new malware comes a-calling appeared first on ...
#Tech #& #Science #Christmas #Consumer #Cybersecurity #Fake #News #Malware #Security […]
#Tech #& #Science #Christmas #Consumer #Cybersecurity #Fake #News #Malware #Security […]
Original post on digitaljournal.com
www.digitaljournal.com
January 2, 2026 at 11:44 PM
This holiday season, a new malware comes a-calling The Christmas-themed SantaStealer is just the tip of the iceberg... The post This holiday season, a new malware comes a-calling appeared first on ...
#Tech #& #Science #Christmas #Consumer #Cybersecurity #Fake #News #Malware #Security […]
#Tech #& #Science #Christmas #Consumer #Cybersecurity #Fake #News #Malware #Security […]
The latest update for #Tanium includes "CTI roundup: SantaStealer, BlackForce, Ink Dragon" and "Two is one, one is none: the art of resilient operations".
#cybersecurity #EndpointProtection #EndpointSecurity https://opsmtrs.com/3DH5Ks9
#cybersecurity #EndpointProtection #EndpointSecurity https://opsmtrs.com/3DH5Ks9
Tanium
Empowering the world’s largest organizations to manage and protect their mission-critical networks.
opsmtrs.com
January 8, 2026 at 4:50 AM
The latest update for #Tanium includes "CTI roundup: SantaStealer, BlackForce, Ink Dragon" and "Two is one, one is none: the art of resilient operations".
#cybersecurity #EndpointProtection #EndpointSecurity https://opsmtrs.com/3DH5Ks9
#cybersecurity #EndpointProtection #EndpointSecurity https://opsmtrs.com/3DH5Ks9
Notícia da BleepingComputer
"New SantaStealer malware steals data from browsers, crypto wallets" #bolhasec
"New SantaStealer malware steals data from browsers, crypto wallets" #bolhasec
New SantaStealer malware steals data from browsers, crypto wallets
A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.
www.bleepingcomputer.com
December 30, 2025 at 1:30 AM
Notícia da BleepingComputer
"New SantaStealer malware steals data from browsers, crypto wallets" #bolhasec
"New SantaStealer malware steals data from browsers, crypto wallets" #bolhasec
Natal do crime: novo malware SantaStealer rouba navegadores e criptomoedas
https://canaltech.com.br/seguranca/natal-do-crime-novo-malware-santastealer-rouba-navegadores-e-criptomoedas/?utm_source=flipboard&utm_medium=activitypub
Posted into Tecnologia @tecnologia-FlipboardBR
https://canaltech.com.br/seguranca/natal-do-crime-novo-malware-santastealer-rouba-navegadores-e-criptomoedas/?utm_source=flipboard&utm_medium=activitypub
Posted into Tecnologia @tecnologia-FlipboardBR
Natal do crime: novo malware SantaStealer rouba navegadores e criptomoedas
Malware-as-a-service espalhado em fóruns hackers e Telegram é caro, mas não consegue evadir medidas de segurança tão bem quanto diz a propaganda
canaltech.com.br
December 18, 2025 at 12:14 PM
Natal do crime: novo malware SantaStealer rouba navegadores e criptomoedas
https://canaltech.com.br/seguranca/natal-do-crime-novo-malware-santastealer-rouba-navegadores-e-criptomoedas/?utm_source=flipboard&utm_medium=activitypub
Posted into Tecnologia @tecnologia-FlipboardBR
https://canaltech.com.br/seguranca/natal-do-crime-novo-malware-santastealer-rouba-navegadores-e-criptomoedas/?utm_source=flipboard&utm_medium=activitypub
Posted into Tecnologia @tecnologia-FlipboardBR
📰 Malware SantaStealer Muncul, Incar Data Browser dan Dompet Kripto
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2025/12/16/malware-santastealer-pencuri-data/
#info #infol#stealera#keamananr#sibert#kriptoa#malwareu#pencurian #dataa#santastealer
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2025/12/16/malware-santastealer-pencuri-data/
#info #infol#stealera#keamananr#sibert#kriptoa#malwareu#pencurian #dataa#santastealer
December 16, 2025 at 4:41 AM
📰 Malware SantaStealer Muncul, Incar Data Browser dan Dompet Kripto
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2025/12/16/malware-santastealer-pencuri-data/
#info #infol#stealera#keamananr#sibert#kriptoa#malwareu#pencurian #dataa#santastealer
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2025/12/16/malware-santastealer-pencuri-data/
#info #infol#stealera#keamananr#sibert#kriptoa#malwareu#pencurian #dataa#santastealer
SantaStealer MaaS Targets Browsers and Crypto Wallets in Memory-Based Data Theft
Rapid7 links SantaStealer to BluelineStealer and details a 14-module, in-memory theft framework with staged exfiltration.
Rapid7 links SantaStealer to BluelineStealer and details a 14-module, in-memory theft framework with staged exfiltration.
SantaStealer MaaS Targets Browsers and Crypto Wallets in Memory-Based Data Theft
Rapid7 links SantaStealer to BluelineStealer and details a 14-module, in-memory theft framework with staged exfiltration.
richbycoin.com
December 16, 2025 at 3:48 PM
SantaStealer MaaS Targets Browsers and Crypto Wallets in Memory-Based Data Theft
Rapid7 links SantaStealer to BluelineStealer and details a 14-module, in-memory theft framework with staged exfiltration.
Rapid7 links SantaStealer to BluelineStealer and details a 14-module, in-memory theft framework with staged exfiltration.
MALWARE ZUM WEIHNACHTSFEST: Santastealer sammelt Geschenke für Cyberkriminelle
www.golem.de/news/amateur...
www.golem.de/news/amateur...
Golem.de: IT-News für Profis
www.golem.de
December 17, 2025 at 1:15 PM
MALWARE ZUM WEIHNACHTSFEST: Santastealer sammelt Geschenke für Cyberkriminelle
www.golem.de/news/amateur...
www.golem.de/news/amateur...
Eine neue Malware namens SantaStealer macht sich bereit für die Weihnachtssaison. Der Trojaner zielt auf Browser-Daten und Krypto-Wallets ab. #Malware #Cybersecurity
SantaStealer: Diese fiese Malware macht jetzt ihr Weihnachtsgeschäft
winfuture.de
December 16, 2025 at 6:11 PM
Eine neue Malware namens SantaStealer macht sich bereit für die Weihnachtssaison. Der Trojaner zielt auf Browser-Daten und Krypto-Wallets ab. #Malware #Cybersecurity
New SantaStealer malware steals data from browsers, crypto wallets
New SantaStealer malware steals data from browsers, crypto wallets
www.bleepingcomputer.com
December 16, 2025 at 11:20 PM
New SantaStealer malware steals data from browsers, crypto wallets
New SantaStealer malware steals data from browsers, crypto wallets
New SantaStealer malware steals data from browsers, crypto wallets
A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.
www.bleepingcomputer.com
December 15, 2025 at 11:05 PM
New SantaStealer malware steals data from browsers, crypto wallets
The holidays should be about joy ✨, not scams. 🚫
In the latest #ReimaginingCyber podcast episode, we unwrap the hidden malware powering festive frauds, from phishing emails to the new “SantaStealer” malware-as-a-service.
Stay protected this holiday season. Listen in: https://bit.ly/4pGYYIJ
In the latest #ReimaginingCyber podcast episode, we unwrap the hidden malware powering festive frauds, from phishing emails to the new “SantaStealer” malware-as-a-service.
Stay protected this holiday season. Listen in: https://bit.ly/4pGYYIJ
December 19, 2025 at 9:18 PM
The holidays should be about joy ✨, not scams. 🚫
In the latest #ReimaginingCyber podcast episode, we unwrap the hidden malware powering festive frauds, from phishing emails to the new “SantaStealer” malware-as-a-service.
Stay protected this holiday season. Listen in: https://bit.ly/4pGYYIJ
In the latest #ReimaginingCyber podcast episode, we unwrap the hidden malware powering festive frauds, from phishing emails to the new “SantaStealer” malware-as-a-service.
Stay protected this holiday season. Listen in: https://bit.ly/4pGYYIJ
New SantaStealer malware is after your passwords and crypto
New SantaStealer malware is after your passwords and crypto
Christmas is around the corner, and so is the SantaStealer malware. While the name sounds jolly, this malware is more than capable of ruining your happiness this festive season. The worst part is that...
worldnewsguru.us
December 23, 2025 at 6:17 PM
New SantaStealer malware is after your passwords and crypto
#TechRadar Talk about coal in your stocking - SantaStealer malware steals data from browsers and crypto wallets https://techrad.ar/9KNY #Security #Pro
December 19, 2025 at 9:36 PM
#TechRadar Talk about coal in your stocking - SantaStealer malware steals data from browsers and crypto wallets https://techrad.ar/9KNY #Security #Pro