StealC
Named by 6 kept items in this workspace.
5 items name it under threat actors and 1 under classification.key entities.
Search every workspace for StealC. It matches the name as written, so it can find other things that share it.
The items that name it 6
infostealer whose operators paid Virtualine in 2026
infostealer distributed via Amadey loader, harvests browser credentials/cookies
Stealer malware; the domain polse[.]us, registered with the same email address as the attacker's other domains, was identified by Microsoft as hosting this malware and was seized as part of Operation Endgame.
Information stealer capable of harvesting a wide range of data from compromised systems, deployed as a secondary payload after SmartLoader.
Information stealer installed by SmartLoader; targets browser passwords, cookies, active sessions, browser extension data, email and remote-access credentials, screenshots, and host information.
All threat actors in this workspace.