Thursday, January 30, 2025
HomeCyber AttackNew Fury Stealer Attacking Victims to Steal Login Passwords

New Fury Stealer Attacking Victims to Steal Login Passwords

Published on

SIEM as a Service

Follow Us on Google News

A new malicious software named “Fury Stealer” has been detected, posing a significant threat to online security.

The malware, created by an unidentified threat actor, is designed to steal sensitive information, including login passwords, from unsuspecting victims.

Cybersecurity analyst MonThreat first reported the announcement of this harmful tool on the social media platform X.

What Does MITRE ATT&CK Expose About Your Enterprise Security? - Watch Free Webinar!

Advanced Features and Capabilities

Fury Stealer is a sophisticated malware with various features that make it particularly dangerous. It can create an executable file with a single command, allowing rapid deployment.

The malware can steal personal data, including Discord accounts, browser-stored passwords, cookies, autofill information, and even credit card details.

Additionally, it targets gaming platforms like Steam and Growtopia, as well as messaging services such as Telegram.

One of Fury Stealer’s standout features is its ability to find Discord backup codes, making it a potent threat to users who rely on Discord for communication.

The malware also includes an anti-virtual machine (VM) and virtual desktop infrastructure (VDS) component, which helps it evade detection by security researchers.

Furthermore, it can simulate fake errors to deceive users into thinking their systems are malfunctioning for other reasons.

Cybersecurity Experts on High Alert

The discovery of Fury Stealer has put cybersecurity experts on high alert. The malware’s ability to disable or enable plugins and its incompatibility injection feature make it adaptable and hard to detect.

Experts advise users to be vigilant, update their security software, and avoid downloading suspicious files or clicking on unknown links.

As the threat landscape continues to evolve, the emergence of tools like Fury Stealer underscores the importance of robust cybersecurity measures.

Users are encouraged to regularly update passwords and enable two-factor authentication to protect their accounts from such sophisticated attacks.

Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN - 14 day free trial

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

New RDP Exploit Allows Attackers to Take Over Windows and Browser Sessions

Cybersecurity experts have uncovered a new exploit leveraging the widely used Remote Desktop Protocol...

New SMS-Based Phishing Tool ‘DevilTraff’ Enables Mass Cyber Attacks

Cybersecurity experts are sounding the alarm about a new SMS-based phishing tool, Devil-Traff, that...

DeepSeek Database Publicly Exposed Sensitive Information, Secret Keys & Logs

Experts at Wiz Research have identified a publicly exposed ClickHouse database belonging to DeepSeek,...

OPNsense 25.1 Released, What’s New!

The highly anticipated release of OPNsense 25.1 has officially arrived! Nicknamed "Ultimate Unicorn," this...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

New RDP Exploit Allows Attackers to Take Over Windows and Browser Sessions

Cybersecurity experts have uncovered a new exploit leveraging the widely used Remote Desktop Protocol...

New SMS-Based Phishing Tool ‘DevilTraff’ Enables Mass Cyber Attacks

Cybersecurity experts are sounding the alarm about a new SMS-based phishing tool, Devil-Traff, that...

DeepSeek Database Publicly Exposed Sensitive Information, Secret Keys & Logs

Experts at Wiz Research have identified a publicly exposed ClickHouse database belonging to DeepSeek,...