StealeriumPy:
A Stealerium variantdistributed through ClickFix

The CSIRT (Computer Security Incident Response Team) of Cegeka Modern SOC recently identified a new variant of the open-source ‘Stealerium’ malware, an information stealer, which is now being delivered through a technique known as ‘ClickFix’. This variant, which Cegeka CSIRT refers to as ‘StealeriumPy’, reflects a growing trend in the threat landscape: threat actors are refining existing tools and pair them with social engineering techniques to obtain sensitive data.

Such methods highly rely on human errors and bypass traditional security measures. This highlights the importance of a robust security monitoring and incident response strategy for every organization.

Download our white paper for an overview and an in-depth malware analysis report on ‘StealeriumPy’.