All things infostealers. Week 47, 2025


A brief look at all things infostealers for the week 47, 2025 (17.11.2025–23.11.2025). StealC returned back to the XSS forum. Grabbed some numbers from marketplaces and few interesting news/articles for you to read.

Infostealer Updates

StealC Stealer

Hello everyone, we are back on xss 🙂

We have released a large number of updates, which we have published on exploit. We will only duplicate the information about the recent update here:

Stealc v2.8.0 update

Build:

  • Redesigned implant for Microsoft Edge, now the software correctly receives the v20 key from new versions of Edge

Database:

Litecoin Core collection added
Dash Core collection added
Armory Wallet collection added
Trezor Suite collection added
AtomicDEX collection added
BitPay collection added
CoPay collection added
StakeCube collection added
GreenAddress collection added
Added MEW Desktop collection
Added MyEtherWallet collection
Added NOW Wallet collection

Gate:

Improved the work of markers inside the log, now they are correctly divided into markers in cookies and markers in passwords, as well as accelerated the work of markers
Fixed flaws in the work of markers with the passwords.txt file
Removed notification about collected seed phrases from the Telegram bot

Admin panel:

  • Added the ability to choose the type of notification in the notification settings (Text message / Screenshot with text / Log file with text)

Screenshot from XSS forum


Marketplace Updates

This section provides some numbers taken from the marketplaces, which include numbers of victims based on stealers, top 5 countries, the victim numbers in the countries of the Nordic region. In addition, see the CryptPad spreadsheet for all more broad numbers.

Marketplace Updates Spreadsheet

Russian Market

Stealers by number of victims
Stealer nameNumber of victims
Lumma7,007,802
Vidar700,916
RisePro145,534
StealC796,818
RedLine192,138
Acreed827,537
Raccoon5,082
Rhadamanthys458,448
Top 5 countries by number of victims
CountryNumber of victims
India1,173,120
Brazil728,038
Indonesia558,122
Egypt484,626
Pakistan413,765
Nordic region countries
CountryNumber of victims
Sweden21,462
Denmark11,726
Norway9,597
Finland7,862
Iceland1,091
Greenland154
Faroe102
Åland24

Exodus Market

Stealers by number of victims
Stealer nameNumber of victims
Lumma473,999
Rhadamanthys106,610
RedLine35,032
StealC26,267
Vidar12,222
Top 5 countries by number of victims
CountryNumber of victims
India71,718
Brazil50,403
Indonesia37,160
USA28,539
Philippines24,779
Nordic region countries
CountryNumber of victims
Sweden1,905
Denmark1,038
Norway816
Finland601
Iceland83

Articles/News

¯\_(ツ)_/¯