Oski Stealer Targets Browser Data, Crypto Wallets in U.S.

guest · Jan 13, 2020

Oski Stealer Targets Browser Data, Crypto Wallets in U.S.
January 13, 2020
https://www.securityweek.com/oski-stealer-targets-browser-data-crypto-wallets-us

The fairly new malware, which has been dubbed Oski Stealer, is being advertised on underground cyber-forums, including several Russian forums, security researcher Aditya K Sood explained in a report shared with SecurityWeek.
The malware is designed to gather sensitive information such as credentials, credit card numbers, wallet accounts, and more, and has already managed to steal over 50,000 passwords.

The malware targets both x86 and x64 versions of Windows 7, 8, 8.1 and 10, and can be installed without admin rights.
The malware is designed to extract credentials from registry, from the browser SQLite database, and by performing man-in-the-browser (MitB) attacks by hooking the browser processes using DLL injection, as well as to extract stored session cookies, including wallets.

“Our research revealed that Oski stealer is in early stages but it is a very effective stealer. Oski stealer has been deployed successfully in the wild and already extracting sensitive data such as credentials from the browsers. The deployment that we analyzed was targeting specifically the North America region,” Sood notes.
Click to expand...

guest · Jan 9, 2021

“Oski Stealer” Is a Widely-Used Cheap Yet Powerful Malware
January 8, 2021
https://www.technadu.com/oski-stealer-widely-used-cheap-yet-powerful-malware/238842/

There’s a piece of malware that has created some frenzy on the Russian parts of the dark web named “Oski Stealer.” The credential-stealing malware first appeared in November 2019, so it’s not exactly new, but its continual development and low price have placed it very high in popularity. More specifically, it goes for sale between $70 and $100 and offers a galore of info-stealing capabilities to its masters.

Researchers at ‘CyberArk’ have analyzed the latest malware samples they could get their hands on and report on the full list of Oski’s capabilities. Written in C++, the malware can steal the following things: [...]
The malware is so valuable in the hands of the threat actors because it is so versatile. It can steal data from over 60 different applications, ranging from web browsers, email clients, and desktop cryptocurrency wallets.
Click to expand...

CyberArk: Meet Oski Stealer: An In-depth Analysis of the Popular Credential Stealer

“Oski” is derived from an old Nordic word meaning Viking warrior, which is quite fitting considering this popular info-stealer is extremely effective at pillaging privileged information from its victims.
In this blog, we provide an in-depth analysis of an Oski stealer sample.
Click to expand...

Log in or Sign up

Oski Stealer Targets Browser Data, Crypto Wallets in U.S.

guest Guest

guest Guest

Log in or Sign up

Oski Stealer Targets Browser Data, Crypto Wallets in U.S.

guest Guest

guest Guest

Useful Searches