Researchers Breach StealC Infrastructure, Access Malware Control Panels

StealC is an infostealer MaaS whose leaked web panel contained an exploitable XSS vulnerability; researchers used this to observe operators and identify a single actor, “YouTubeTA,” responsible for compromising over 5,000 machines and exfiltrating roughly 390,000 passwords and 30 million cookies via malware-laced downloads promoted on hijacked YouTube channels, with operational fingerprinting and an IP pointing to an Eastern European ISP.