SVC New Stealer on the Horizon

SvcStealer 2025 is a Windows information-stealer observed in a spear-phishing campaign that harvests system information, user credentials, browser and messaging app data, and cryptocurrency wallet files, compresses the collected data and exfiltrates it to an HTTP-based C2. The analysis describes persistence and singleton-ensuring behavior, process termination to evade monitoring, screenshot capture, the ability to download and execute additional payloads from C2, supplied IOCs (file hashes, C2 path, IPs), a YARA rule, and mapped MITRE ATT&CK techniques and mitigations.