New open-source infostealer, and reflections on 2023 so far
Summary: Cisco Talos reports that SapphireStealer, an open-source information stealer first released in December 2022, has been increasingly observed across public malware repositories, with threat actors extending it with added functionality and using other tooling to make its detection harder. Talos Head of Outreach Nick Biasini cited attackers' growing use of malicious open-source tooling as a major 2023 trend and a large part of the continuous fracturing of the ransomware and extortion landscape.
Why it matters: A free, publicly available stealer that any actor can download, modify, and harden against detection lowers the bar for credential theft, and Talos ties that same open-source tooling trend to the ongoing splintering of the ransomware and extortion landscape.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026