Celestial Stealer
Summary
Celestial Stealer, a highly advanced information-stealing program written in JavaScript, has been designed to infiltrate Windows 10 and 11 devices, extracting sensitive user data while evading detection. The malware also sets its sights on user accounts from social media, messaging, gaming, and streaming platforms such as Discord, Twitch, Instagram, TikTok, X (formerly Twitter), Steam, and Roblox. When targeting Discord, Celestial is capable of generating fraudulent pop-ups in the victims native language, tricking them into revealing sensitive information such as passwords, two-factor authentication (2FA) codes, billing addresses, and payment details. If an infected system belongs to an employee, attackers could gain access to corporate networks, leading to data breaches, financial losses, and reputational damage. Additionally, implementing multi-factor authentication (MFA) on important accounts can add an extra layer of security, making it harder for attackers to gain access even if credentials are stolen.
Classifications
AskAI Classifications
LabelsLinked Companies
