Researchers hack malware gang via its own weak spot

Security researchers at CyberArk discovered a critical flaw in StealC malware’s infrastructure. Using an XSS vulnerability, they gained access to sessions of cybercriminals who were stealing cookies themselves. StealC is an infostealer that has been active since early 2023 and is offered as Malware-as-a-Service (MaaS). The platform focuses on stealing cookies, passwords, and other sensitive … Read more