logo

Jester Stealer: An Emerging Info Stealer

ID: 182ddad3-9ffd-5fac-81be-016c74c02f78

STIX ID: report--182ddad3-9ffd-5fac-81be-016c74c02f78

Feed Name: Cyble Blog

Threat Score
70/100

Date Published: 2025-05-20

Date Updated: 2026-07-16

...
...

Jester Stealer is a .NET info-stealer first observed on cybercrime forums in July 2021 that collects login credentials, cookies, credit card details, crypto wallets and system information, performs anti-VM/sandbox checks, stores exfiltrated data in-memory and sends it via a Tor .onion C2 or fallback to Telegram/AnonFiles; the report provides technical analysis, multiple sample hashes, a YARA rule, MITRE ATT&CK mappings and recommended mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.