Amnesia Stealer Technical & Malware Analysis Report

Download Report

The Amnesia Stealer is a highly sophisticated, customizable malware identified by ThreatMon on September 17 2024, representing a serious threat due to its open-source nature and widespread availability on underground forums. Functioning as Malware-as-a-Service (MaaS), the malware makes it easy for cybercriminals to carry out data theft and system control through a user-friendly interface, leveraging Discord and Telegram for Command & Control (C2) operations. This accessibility allows attackers to steal a wide range of sensitive data, including browser passwords, Discord tokens, gaming session files, cryptocurrency wallets, and Wi-Fi credentials.

Key findings include:

Amnesia Stealer, a customizable open-source malware, was identified by ThreatMon on September 17, 2024.
Functions as Malware-as-a-Service (MaaS), making it easily accessible for cybercriminals.
Uses Discord and Telegram for Command & Control (C2) operations.
Capable of stealing sensitive data like browser passwords, Discord tokens, cryptocurrency wallets, and Wi-Fi credentials.
Features keylogging, clipboard hijacking, and can bypass Windows Defender.
Can inject additional malware like trojans, cryptocurrency miners, and droppers.
Available in three versions: Free, VIP, and an Android variant (in development).
Android version can steal call logs, SMS, and WhatsApp session files.

Relevant Reports

We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields: