Know What's Happening in Cybersecurity

StealC Hackers Hacked as Researchers Hijack Malware Control Panels

Researchers at CyberArk uncovered a cross‑site scripting (XSS) vulnerability in the web‑based control panel of the StealC info‑stealing malware. Exploiting the flaw, they observed active operator sessions, harvested browser and hardware fingerprints, and hijacked session cookies to gain remote control of the panel. The investigation revealed that a StealC operator was using an Apple M3 system from Ukraine, inadvertently exposing a real IP address after bypassing a VPN. The disclosure is intended to disrupt the malware‑as‑a‑service ecosystem that has seen a surge in StealC operators.