Planet Stealer Malware Analysis Report

Download Report

Planet Stealer is a newly discovered information theft tool that recently surfaced on a dark web forum. Designed to compromise user privacy and security, this sophisticated malware targets a wide range of sensitive data from popular web browsers, crypto wallets, and communication platforms.

In this report, we examined Planet Stealer in depth and concluded that its advanced capabilities pose a significant threat to online privacy and security by targeting a wide range of sensitive data. Users should be careful and proactively protect their devices and data against such malware.

Key findings include:

Planet Stealer can steal passwords, cookies, autofill information, and credit card details from Gecko and Chromium-based web browsers.
The malware goes beyond traditional data theft by targeting cryptocurrency wallet files. It can extract wallet files from software and browser extension wallets, potentially leading to significant financial losses for victims.
Planet Stealer specifically targets Exodus Expression, a secure note feature in the Exodus cryptocurrency wallet using a technique called Exodus Injection.
One of the most concerning aspects of Planet Stealer is its ability to send stolen information to a Telegram webhook without leaking a chat ID and bot token

Relevant Reports

We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields: