Security News > 2022 > July > Source code for Rust-based info-stealer released on hacker forums
The source code for an information-stealing malware coded in Rust has been released for free on hacking forums, with security analysts already reporting that the malware is actively used in attacks.
The malware, which the author claims to have developed in just six hours, is quite stealthy, with VirusTotal returning a detection rate of around 22%. As the info-stealer is written in Rust, a cross-platform language, it allows threat actors to target multiple operating systems.
Analysts at cybersecurity firm Cyble, who sampled the new info-stealer and named it "Luca Stealer," report that the malware comes with standard capabilities for this type of malware.
The stealer also targets a range of "Cold" cryptocurrency and "Hot" wallet browser addons, Steam accounts, Discord tokens, Ubisoft Play, and more.
Where Luca Stealer stands out against other info-stealers is the focus on password manager browser addons, stealing the locally stored data for 17 applications of this kind.
The malware will use a Discord webhook to send the data back to the attackers for larger logs of stolen data.