The notorious Nikki Stealer group has transitioned into the Iluria Stealer group, maintaining a strong presence with a predominantly Portuguese-speaking user base. Both their websites are hosted by Hostinger, and the current owner, as per his Discord bio, claims to be the former CEO of Nikki Stealer. Dynamic analysis reveals that Iluria Stealer has capabilities to steal browser passwords, autofill data, and cookies, indicating a serious threat. Recently, on May 11, 2024, "Ykg," the developer of Iluria Stealer, announced the release of version 2. This evolution and expansion of the group's activities highlight the need for ongoing vigilance and robust security measures.

Link to the Research Report: Iluria Stealer; a Variant of Another Discord Stealer - CYFIRMA

#CYFIRMA #CyfirmaResearch #NikkiStealer #IluriaStealer #Hostinger #EpsilonStealer #ExternalThreatLandscapeManagement #ETLM #ThreatIntelligence ##DigitalDefense #CyberSecurity

https://www.cyfirma.com/