'Styx Stealer' Blows Its Own Cover With Sloppy OpSec Mistake

Check Point Research traced a new information stealer called Styx Stealer to a Turkey-based developer after an OpSec mistake leaked debugging data; researchers recovered Telegram bot tokens, chat IDs, contacts, and transaction records tying the author (Sty1x) to an Agent Tesla operator and revealing about $9,500 in purchaser payments. The report outlines Styx Stealer's capabilities to exfiltrate browser extension data, cryptocurrency wallets, Discord/Telegram/Steam sessions, documents, and system/location data, plus its obfuscation/evasion features and country-based kill-switches.