Warden Stealer Targets 200+ Crypto Wallet Extensions and 360+ Applications

Warden is a Rust-based infostealer observed since May and actively promoted on underground forums that targets Windows 8–11 systems to harvest browser credentials, cryptocurrency wallets (extended support for many wallet extensions and clipper networks), AI assistant and coding tool data, and numerous application categories; it is distributed via loaders (memory reconstruction and process injection), cracked software, malicious ads, and click-fraud campaigns, includes anti-VM checks and multiple obfuscation layers, and researchers provide sample SHA-256 loader IOCs.