FlagThis

Cybersecurity experts are warning of a widespread campaign involving Nova Stealer, a variant of SnakeLogger malware, now being sold as Malware-as-a-Service (MaaS) on underground forums. Priced as low as $50 for a 30-day license, Nova Stealer is designed to steal sensitive information, including credentials, keystrokes, screenshots, and clipboard data, making it an attractive tool for cybercriminals. This affordability and ease of deployment significantly lower the barrier for entry, enabling even novice attackers to launch sophisticated cyberattacks, especially targeting industries such as finance, retail, and IT.

The malware is often distributed through phishing emails disguised as legitimate documents. Once executed, Nova Stealer employs sophisticated techniques to evade detection, including steganography and process hollowing, while exploiting Windows utilities like PowerShell to disable Microsoft Defender. Stolen data is exfiltrated via channels such as SMTP, FTP, or Telegram APIs, and can be leveraged for identity theft, financial fraud, and ransomware attacks. The rise of Nova Stealer highlights the persistent threat posed by information stealers in the cybercrime ecosystem.

ImgSrc: securityonline.

References :

• gbhackers.com: Beware of Nova Stealer Malware Sold for $50 on Hacking Forums
• securityonline.info: $50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service
• securityonline.info: The BI.ZONE Threat Intelligence team has reported a significant ongoing campaign distributing the NOVA stealer, a new commercial
• gbhackers.com: The cybersecurity landscape faces a new challenge with the emergence of Nova Stealer, a malware marketed under the Malware-as-a-Service (MaaS) model.
• cyberpress.org: Cybercriminals Selling Nova Stealer Malware for $50 on Dark Web

Classification:

• HashTags: #NovaStealer #Malware #Cybersecurity
• Target: Individuals and Organizations
• Attacker: Nova Stealer
• Feature: Malware-as-a-Service
• Malware: Nova Stealer
• Type: Malware
• Severity: Major