A user on BHF advertised a new MaaS stealer named Misericorde Stealer. The text of the post and screenshots of the panel is taken “as-is” from the thread on the BHF forum.
Misericorde Stealer(C++ stub) – USER-HOST PANEL / v10&v20 decrypt / FOR ALL 79$+
Misericorde Panel is our main advantage – security and privacy, the panel is installed ENTIRELY on your servers, we do not check, do not record, do not monitor you or your bots. All data from the client goes directly to your servers where the panel is installed.
The client collects data from all Chromium and Gecko browsers.
Collect more than 125 crypto wallets (extensions and desktop), as well as more than 10 authenticators – you can add new ones or delete unnecessary wallets or extensions yourself through the built-in config.
Decryption of all data is performed by a panel ON YOUR server.
No UAC rights or browser closures are required for the data collection!
CLIENT STUB
- The client build is written in pure C++ (WinAPI) without dependencies, the build weight is 350KB~
- A hybrid browser profile search is used in the system, ALL profiles and ALL browsers are collected.
- Optimized filegrabber – does not collect empty garbage and does not overload the log.
- An AntiVM module that will not allow your build to run on virtual machines/sandboxes
- Antidebug module, to prevent the analysis of your files.
- The client communication with the panel is encrypted with HTTPS + AES-256-GCM.
- !!!AntiCIS!!! – Our build will NOT run on devices from the CIS countries (Ukraine, Turkmenistan inclusive), checking by IP, layout, system language ~additional information about this module is described below~
PANEL
THE PANEL IS INSTALLED ENTIRELY ON YOUR SERVERS, we do not have access to it, as well as to your logs, you can do any checks yourself after purchasing a license.
The user-friendly, minimalistic GUI panel is very easy to install – you run and use it.
~For installation, you will need a server with a MINIMUM configuration –
3CPU 6RAM for optimal performance.
OC – Win10/11, or Windows Server.~
Panel displays detailed information about your logs and incoming connections.
Accepts requests from the client through the CHUNKED system, even if the user’s device is overloaded during the launch of the client build, almost all data from the device will be successfully received.
Supports TelegramAPI – you can include notifications about new logs in your telegram channel, and even send logs in their entirety to telegram.
The BuildTag system, which allows you to find out which build your log came from, is assigned in the builder.
The AntiDuplicate setting allows you to receive only unique logs without repetitions.
As mentioned earlier, the client has an ANTICIS module that does not allow CIS devices to access your dashboard, BUT we also use additional checks and restrictions on the server – after decrypting the data, the server checks your data and deletes requests with passwords and cookies from CIS sites like –
avito
gosuslugi
…
etc.
In addition, domains are subject to restrictions “.gov” – their data will also be deleted if they are in the final archive.
Showcase of panel:
Screenshots of panel
FAQ
- We are against working on the CIS and government agencies, any requests to unblock these requests will be ignored.
- The detectors are cleaned every time the panel is updated, right now it is 1/36, the file is completely invisible to WD win10/11.
- We will never offer you any promotions or purchase offers in private messages, revoke your licenses OR extort / ask for money – ALWAYS CHECK THE RELEVANCE OF THE CONTACT THROUGH THE FORUM!!!
- We are ready to make any transactions through the guarantors at YOUR expense.
Plans for upcoming updates:
- Flexible configuration of the Filegrabber module via the panel configuration.
- An API system for creating builds and getting new logs through the API for your projects.
- CLIPPER module
- Wallets Brute
- Google Token Restore
- PERSONAL SELF-HOSTED shim servers.
~ you can send any suggestions to the support service.
License prices:
Licenses are provided only by temporary subscriptions – all updates and support are included in the price and are available to every active customer
1 Week – $ 79 \ 6.400 rubles
1 Month – $ 179 \ 14.300 rubles
3 Months – $ 499 \ 40.000 rubles
6 Months – $ 929 \ 74.200 rubles
Payment accept only via crypto
WE DO NOT PROVIDE VOUCH COPY.
All the functionality of the panel and the build is included in each of their tariffs, you do not need to pay extra for any functions!