Prynt Stealer Spotted In the Wild

Cyble Research Labs analyzed Prynt Stealer, a recently advertised and customizable .NET infostealer that steals browser credentials, cookies, autofill, crypto wallets, messaging sessions, gaming and FTP data, screenshots, and Wi‑Fi credentials; it uses obfuscation (rot13 on Base64), AES-encrypted strings, in-memory AppDomain loading, and exfiltrates compressed data via a Telegram bot. The report includes technical details of targeted applications, persistence/collection behavior, optional modules (keylogger, clipper, anti-analysis), recommended mitigations, MITRE ATT&CK mappings, and multiple malware hashes as IoCs.