New “Complaint Stealer” Malware Escalates, Targeting Cryptocurrency Wallets & Hospitality Sector

Cofense Intelligence reports an escalating phishing campaign distributing a new information-stealing malware named "Complaint Stealer," which targets cryptocurrency wallets, mining-related system data, and browser-stored credentials. The campaign uses hospitality-themed complaint lures, password-protected archives hosted on mega.nz, and leverages legitimate tools (AutoIT, PKWARE) while bypassing Secure Email Gateways such as Cisco IronPort and Microsoft ATP; observed samples share a common C2.