


Further analysis by SEKOIA.IO allowed us to associate this new malware family with Stealc. The Command and Control (C2) communications of the associated samples share similarities with those of Vidar and Raccoon. In early February 2023, SEKOIA.IO identified a new malware family when tracking infrastructures distributing information stealers. This information suggests that this newcomer could be a serious competitor to the popular widespread malware families mentioned above.

The threat actor presents Stealc as a fully featured and ready-to-use stealer, whose development relied on Vidar, Raccoon, Mars and Redline stealers. In January 2023, through our Dark Web monitoring routine, SEKOIA.IO identified a new information stealer advertised as Stealc by its alleged developer, going by the handle Plymouth.
