Cyble researchers noticed a brand new Rust-based infostealer, named Luca Stealer. The supply code of the malware has been launched without cost on hacker boards. Luca Stealer is being actively utilized by danger actors.
Diving into the main points
- The supply code for Luca Stealer used to be leaked on July 3.
- The researchers have recognized 25 malware samples constructed in this supply code within the wild.
- The stealer can goal quite a lot of Chromium-based browsers, chat apps, gaming apps, and cryptocurrency wallets.
- Previous, the stealer used to be constructed to pilfer knowledge the use of a Telegram bot. On the other hand, since it may well add knowledge simplest as much as 50MB, the developer made it appropriate with Discord webhooks.
- The writer claimed that the malware used to be evolved simplest in six hours. It displays a detection charge of twenty-two% on VirusTotal.
Why this issues
Luca Stealer’s developer is more than likely new at the cybercrime discussion board and has leaked the supply code to construct a name for themselves. They’ve, moreover, equipped steps to vary the stealer and collect the supply code. It’s been up to date 3 times and the developer is repeatedly including more than one features.
Functionalities
- Luca Stealer is particular in the way in which that it may well thieve in the neighborhood saved knowledge for 17 packages because it makes a speciality of password supervisor browser extensions.
- Along with this, it captures screenshots and saves them as a PNG record, and sends the main points to the operators.
- On the other hand, it lacks the clipper used to vary clipboard contents to hijack crypto transactions, not like maximum infostealers.
The base line
In accordance with the samples detected, it’s but unknown whether or not Luca Stealer will probably be extensively followed by way of cybercriminals. On the other hand, the truth that it’s loose whilst maximum infostealers come at a value, may act as a motive force. Even supposing the stealer is coded in Rust, it may well simplest goal Home windows OS. Researchers look forward to seeing additional enhancements within the malware.
