RedLine Stealer malware is the main source of credentials in two major marketplaces

According to Insikt Group analysts, the vast majority of stolen credentials sold on two large underground darknet marketplaces are collected using the RedLine Stealer malware.

RedLine Stealer was first discovered in March 2020. The malware is capable of extracting credentials from browsers, FTP clients, emails, instant messengers, and VPNs. In addition, the malware can steal authentication cookies and card numbers stored in browsers, chat logs, local files and databases of cryptocurrency wallets.

Initially, this malware was sold on hack forums called REDGlade, but after the tool received positive reviews, pirated versions of RedLine Steale began to appear on the same forums.

As a result, by August of this year, this allowed malware to spread widely among cybercriminals, and they did not even have to pay to use the malware. At the same time, the researchers note that the paid version of RedLine Steale also found its customers.

In June 2021, Insikt Group discovered on Amigos Market and Russian Market regular publications of identical lots containing the same timestamps, data on the geographic location of affected machines and Internet providers, [obtained using] the same info-stealers.the researchers write.

RedLine Stealer malware

The Insikt Group expertsconclusions echo a similar KELA report dated February 2020. Then the researchers found that about 90% of the stolen credentials on the Genesis Market were obtained as a result of attacks by the AZORult info-stealer.

These findings suggest that underground marketplaces are highly fragmented and usually work with their own specific vendors. Likewise, legitimate marketplaces have their own preferences in choosing business partners.

Stolen corporate data such as user credentials regularly ends up on paste sites and dark web channels, allowing cybercriminals to purchase the data, and potentially use it to gain access to an organization’s network or systems.the researchers say and advise you to be stricter about data security.

Let me remind you that we also wrote that BluStealer malware steals cryptocurrency and spreads through phishing emails.

हेल्गा स्मिथ

मुझे हमेशा से कंप्यूटर विज्ञान में रुचि थी, विशेष रूप से डेटा सुरक्षा और विषय, जिसे आजकल कहा जाता है "डेटा विज्ञान", मेरी शुरुआती किशोरावस्था से ही. मुख्य संपादक के रूप में वायरस रिमूवल टीम में आने से पहले, मैंने कई कंपनियों में साइबर सुरक्षा विशेषज्ञ के रूप में काम किया, जिसमें अमेज़न का एक ठेकेदार भी शामिल है. एक और अनुभव: मुझे आर्डेन और रीडिंग विश्वविद्यालयों में पढ़ाना है.

उत्तर छोड़ दें

यह साइट स्पैम को कम करने के लिए Akismet का उपयोग करती है. जानें कि आपका टिप्पणी डेटा कैसे संसाधित किया जाता है.

शीर्ष पर वापस जाएँ बटन