Cinoshi Project and the Dark Side of Free MaaS

Cinoshi is a recently observed Malware-as-a-Service platform offering free stealer and paid botnet/clipper/cryptominer components; its stealer harvests browser credentials, crypto wallets, and application sessions (Discord/Telegram/Steam), supports clipper functionality that swaps Steam trade links, downloads additional payloads including a miner, and uses a web panel for build configuration and C2 management. The report includes technical analysis of a sample binary (SHA256 provided), C2 URLs, persistence mechanisms, IOCs, and recommended mitigations such as blocking malicious domains, enabling DLP, and enforcing MFA.