New Flame Stealer malware steals credit card data

A new malware called "Flame Stealer" has taken the cybersecurity community by storm, posing a significant threat to users' financial and personal data.

See also: Fake Google Authenticator sites install DeerStealer malware

This sophisticated software was first announced on Telegram on April 14, 2024 , and has been evolving ever since with claims that it is undetectable by conventional antivirus tools.

The Flame Stealer malware is designed to be an extensive data thief, capable of stealing a wide range of sensitive information. According to a tweet from ThreatMon, the malware can capture login information, new emails, passwords, credit card details, and PayPal information.

This stolen data is immediately transmitted to a designated webhook or Telegram channel, ensuring that cybercriminals receive the information in real time. The malware remains continuously active on infected systems through automatic reinjection, making it a persistent threat.

One of the most worrying features of the Flame Stealer malware is its ability to target popular platforms such as Discord, Spotify, Instagram, TikTok, and Roblox.

See also: Chinese hackers target Japanese companies with LODEINFO and NOOPDOOR Malware

It captures login credentials and steals cookies, passwords, autofill data, and credit card information from these platforms. This broad targeting scope increases the risk for many users, especially those who frequently use these services.

The malware also collects information about browser extensions, Discord accounts, logins, bots, and servers, adding another layer of data theft.

Flame Stealer malware uses advanced methods to evade detection by antivirus software, making it particularly dangerous. It takes screenshots of the user's desktop and steals visual data at critical moments, such as when users enter sensitive information.

Additionally, it targets digital assets by stealing wallet information and entered two-factor authentication (2FA) codes, posing a threat to users’ online security. The malware also collects detailed information about the infected computer, including private accounts and digital rights such as Fivem accounts.

See also: Hackers Target Polish Businesses with Agent Tesla and Formbook Malware

Malware attacks, such as Flame Stealer, pose a significant threat to both individuals and organizations, often compromising sensitive information and disrupting operations. These attacks can take many forms, including viruses, ransomware, spyware , and trojans, each of which is designed to exploit vulnerabilities in software or systems. Once malware has infiltrated a device, it can destroy files, steal data, or even take control of the system, leading to potential financial loss and reputational damage. Preventing malware attacks includes implementing strong security measures, such as antivirus software, regular system updates, and educating users about safe browsing practices.

Source: cybersecuritynews