Remember StealC, the infostealer Europol took down in June during Operation Endgame? Its seller just came back: They’ve just started selling Stadia, a RAT that reuses StealC’s code byte for byte.
The Varonis Threat Labs team bought the build the day it listed. Stadia can control a hidden desktop and run commands, and StealC’s stealer is still in there as one of six modules. The seller is even offering returning customers a free month to come back.
Varonis just published this blog post: https://www.varonis.com/blog/stealc-returns
Related
This entry was posted on October 22, 2026 at 1:09 pm and is filed under Commentary with tags Varonis. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
StealC is back with a RAT
Remember StealC, the infostealer Europol took down in June during Operation Endgame? Its seller just came back: They’ve just started selling Stadia, a RAT that reuses StealC’s code byte for byte.
The Varonis Threat Labs team bought the build the day it listed. Stadia can control a hidden desktop and run commands, and StealC’s stealer is still in there as one of six modules. The seller is even offering returning customers a free month to come back.
Varonis just published this blog post: https://www.varonis.com/blog/stealc-returns
Share this:
Like this:
Related
This entry was posted on October 22, 2026 at 1:09 pm and is filed under Commentary with tags Varonis. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.