logo

Luca Stealer Source Code Leaked on a Cybercrime Forum

ID: 30351ace-f777-5e0f-a26c-420a25310713

STIX ID: report--30351ace-f777-5e0f-a26c-420a25310713

Feed Name: Cyble Blog

Threat Score
78/100

Date Published: 2025-05-20

Date Updated: 2026-07-16

...
...

Cyble Research Labs analyzed 'Luca Stealer', a Rust-based infostealer whose source code was leaked on a cybercrime forum and later published on GitHub; multiple samples (>25) are observed in the wild. The stealer targets over 30 Chromium-based browsers, browser extensions, cold crypto wallets, gaming and messaging applications to exfiltrate credentials, cookies, session tokens, screenshots and system information via Telegram bots or Discord webhooks; the report includes MITRE ATT&CK mappings and cryptographic hashes as IoCs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.