logo

New SantaStealer malware steals data from browsers, crypto wallets

ID: 90f9dc12-3527-5aea-be36-88d4e5ea2b1d

STIX ID: report--90f9dc12-3527-5aea-be36-88d4e5ea2b1d

Feed Name: Bleeping Computer

Threat Score
70/100

Date Published: 2025-12-15

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

Rapid7 analyzed leaked samples and the affiliate web panel for SantaStealer, a newly advertised MaaS info-stealer (rebranded from BluelineStealer) that exfiltrates browser credentials, crypto wallets, messaging app data, and documents via modular threads and a hardcoded C2; the malware offers configurable builds and subscription tiers but appears currently immature and detectable in analyzed samples.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.