New Fury Stealer Attacking Victims to Steal Login Passwords

A new malicious software named “Fury Stealer” has been detected, posing a significant threat to online security.

The malware, created by an unidentified threat actor, is designed to steal sensitive information, including login passwords, from unsuspecting victims.

Cybersecurity analyst MonThreat first reported the announcement of this harmful tool on the social media platform X.

What Does MITRE ATT&CK Expose About Your Enterprise Security? - Watch Free Webinar!

Advanced Features and Capabilities

Fury Stealer is a sophisticated malware with various features that make it particularly dangerous. It can create an executable file with a single command, allowing rapid deployment.

The malware can steal personal data, including Discord accounts, browser-stored passwords, cookies, autofill information, and even credit card details.

Additionally, it targets gaming platforms like Steam and Growtopia, as well as messaging services such as Telegram.

One of Fury Stealer’s standout features is its ability to find Discord backup codes, making it a potent threat to users who rely on Discord for communication.

The malware also includes an anti-virtual machine (VM) and virtual desktop infrastructure (VDS) component, which helps it evade detection by security researchers.

Furthermore, it can simulate fake errors to deceive users into thinking their systems are malfunctioning for other reasons.

Cybersecurity Experts on High Alert

The discovery of Fury Stealer has put cybersecurity experts on high alert. The malware’s ability to disable or enable plugins and its incompatibility injection feature make it adaptable and hard to detect.

Experts advise users to be vigilant, update their security software, and avoid downloading suspicious files or clicking on unknown links.

As the threat landscape continues to evolve, the emergence of tools like Fury Stealer underscores the importance of robust cybersecurity measures.

Users are encouraged to regularly update passwords and enable two-factor authentication to protect their accounts from such sophisticated attacks.

Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN - 14 day free trial