Solving the Puzzle: Reversing the New Stealer Jigsaw

Download Report

During our investigation, our team of analysts made a significant discovery that the Jigsaw Stealer is an exact replica of the Meow Stealer, with the only difference being the name change. The hacker behind this malware is attempting to deceive potential buyers by rebranding the same stolen software. The Meow Stealer first appeared on Telegram in September 2022 and later resurfaced on a hacker’s forum in April 2023. Notably, this sophisticated malware possesses the capability to extract data from various software, and it boasts a minimal detection rate when a crypter is employed.

This report focuses on the threat intelligence gathered on the Jigsaw Stealer, a malicious software available for sale on a hacker’s forum.

Key findings include:

Jigsaw Stealer is an exact copy of Meow Stealer; The only difference is the name change.
The hacker behind this malware is attempting to deceive potential buyers by rebranding the same stolen software.
It can strengthen our defense through open cooperation and dissemination of threat intelligence.
Our Team engaged in direct communication with the seller on the forum, successfully obtaining a sample of the Jigsaw Stealer for thorough technical analysis.

Relevant Reports

We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields: