All things infostealers. Week 14, 2025


A brief look at all things infostealers for the week 14, 2025 (31.03.2025–06.04.2025). This week observed updates from LummaC2 and StealC infostealers. Grabbed some numbers from marketplaces and nothing really interesting in the news.

Infostealer Updates

LummaC2

Note: The update posts are copy-pasted as is (and machine-translated if post wasn’t available in English, possibly with some minor edits by me)

Update 2.04

  1. Added a new method for Google Chrome to collect restore tokens
  2. Completely reworked the work of knocking in Telegram
  3. Added resending the log to Telegram if it was not delivered
  4. Added %full% variable, which indicates whether the log is completely collected before sending it to Telegram
  5. Added option to choose to send only complete logs (determined by the presence of System.txt)
  6. Cleaned WD 10/11 + Cloud

Screenshot from XSS Forum


StealC

Note: The update posts are copy-pasted as is (and machine-translated if post wasn’t available in English, possibly with some minor edits by me)

Update stealc v2.1.0

Build:

  • reworked sending heavy files (last metamask update)
  • now files are transferred in chunks of 256kb
  • rewrote networking on wininet

Admin panel:

  • changed logic of detecting duplicates for last 24 hours
  • fixed ignoring duplicates by HWID
  • changed calculation of log weight on logs page
  • fixed link in telegram bot to download logs
  • added page of bounce statistics for each tag for traffers

Screenshot from XSS Forum


Marketplace Updates

This section provides some numbers taken from the marketplaces, which include numbers of victims based on stealers, top 5 countries, and the victim numbers in the countries of the Nordic region.

RussianMarket

Stealers by number of victims
Stealer nameNumber of victims
Lumma8,278,254
RisePro1,429,579
Vidar1,305,901
StealC1,005,850
RedLine789,890
Raccoon330,040
Acreed17,104
Top 5 countries by number of victims
CountryNumber of victims
India1,345,095
Brazil1,036,285
Indonesia716,032
Egypt653,936
Pakistan645,113
Nordic region countries
CountryNumber of victims
Sweden21,697
Denmark11,580
Norway9,080
Finland7,666
Iceland1,119
Greenland170
Faroe108
Åland18

ExodusMarket

Stealers by number of victims
Stealer nameNumber of victims
Lumma119,769
RedLine98,682
Vidar55
Unknown10
Top 5 countries by number of victims
CountryNumber of victims
Peru7,306
Turkey7,176
India6,307
Pakistan6,285
Vietnam5,822
Nordic region countries
CountryNumber of victims
Norway142
Sweden96
Denmark47
Finland44
Iceland10

Articles/News

oh well