Infostealer
Mystic Stealer
According to ZScaler, a new information stealer that was first advertised in April 2023, capable of stealing credentials from nearly 40 web browsers and more than 70 browser extensions, also targeting
Mystic Stealer is a Windows infostealer.
Background
ZScaler reports that this information stealer surfaced in advertisements starting April 2023 and can harvest credentials from close to 40 web browsers and over 70 browser extensions, while also going after cryptocurrency wallets, Steam, and Telegram. Its code is heavily obfuscated, relying on polymorphic string obfuscation, hash-based import resolution, and constants computed at runtime. Mystic communicates using a custom binary protocol encrypted with RC4.
Source: Malpedia (Fraunhofer FKIE).