Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

Cybersecurity researchers have disclosed a cross-site scripting (XSS) vulnerability in the web-based control panel used by operators of the StealC information stealer, allowing them to gather crucial insights on one of the threat actors using the malware in their operations.
“By exploiting it, we were able to collect system fingerprints, monitor active sessions, and – in a twist that will…

Read the rest of the story at Read More

Source: The Hacker News