Analyzing StealC V2
Introduction The Malware-as-a-Service (MaaS) business model has changed over the past few years, specifically showing an increase in info-stealer attacks. These attacks are responsible for most of the initial entry point for data breaches, and they enable financial fraud, ransomware attacks, identity theft and significant corporate network intrusions. In this post we’re going in a technical breakdown of StealC V2, a MaaS product that is sold on the dark web and has been active since March 2025. Version 2 of StealC introduced an improved version of the stealer, including a complete codebase rewrite in C++, remodeled C2 communications with encryption, adaptable file stealer and some additional features. ...