Report

Amnesia Stealer Technical & Malware Analysis Report

The Forrester Wave™: Managed Detection and Response, Q2 2023

Amnesia Stealer Technical & Malware Analysis Report

The Amnesia Stealer is a highly sophisticated, customizable malware identified by ThreatMon on September 17 2024, representing a serious threat due to its open-source nature and widespread availability on underground forums. Functioning as Malware-as-a-Service (MaaS), the malware makes it easy for cybercriminals to carry out data theft and system control through a user-friendly interface, leveraging Discord and Telegram for Command & Control (C2) operations. This accessibility allows attackers to steal a wide range of sensitive data, including browser passwords, Discord tokens, gaming session files, cryptocurrency wallets, and Wi-Fi credentials. 

Key findings include:

  • Amnesia Stealer, a customizable open-source malware, was identified by ThreatMon on September 17, 2024.
  • Functions as Malware-as-a-Service (MaaS), making it easily accessible for cybercriminals.
  • Uses Discord and Telegram for Command & Control (C2) operations.
  • Capable of stealing sensitive data like browser passwords, Discord tokens, cryptocurrency wallets, and Wi-Fi credentials.
  • Features keylogging, clipboard hijacking, and can bypass Windows Defender.
  • Can inject additional malware like trojans, cryptocurrency miners, and droppers.
  • Available in three versions: Free, VIP, and an Android variant (in development).
  • Android version can steal call logs, SMS, and WhatsApp session files.




ThreatMon Free Trial

Download Download Here

Start Your Free Trial Now!

The free trial of ThreatMon allows users to explore the product's security benefits. During this trial period, you can test Threat Intelligence data, detect threats to your organization and recommend security measures.

Start Free Trial