Mystic Stealer software for stealing cryptocurrency from dozens of wallets appeared on the Internet

Experts warned of hackers selling cryptocurrency theft software
Mystic Stealer software for stealing cryptocurrency from dozens of wallets appeared on the Internet
The developer of Mystic Stealer, which is available by subscription for $150 a month, has banned its use in the CIS countries and has written such restrictions in the code

A software program for hacking other programs called Mystic Stealer that attacks dozens of crypto-applications has spread on the web. It costs $150 per month and targets 21 cryptocurrency applications, 40 browsers, more than 50 cryptocurrency browser extensions, and many other services and plugins.

Reports on Mystic Stealer, published almost simultaneously by cybersecurity companies InQuest, Zscaler, and Cyfirma, warn of the spread of the new malware and its effectiveness.

The program is rapidly gaining popularity in the cybercriminal community and is increasingly being used in attacks, experts warned.

Mystic Stealer released version 1.0 in April but had already been updated to version 1.2 by the end of May. The vendor advertised the new software on various hacker forums, offering it for a subscription of $150 a month or $390 a quarter. The project also has a telegram channel where development news, software features, and other topics are discussed.

When launched for the first time, Mystic collects information about the operating system and sends data to the attacker's server. Then it already performs its specific tasks of looking for data stored in browsers (cookies) and applications.

A complete list of services that the program hacks are given in the Zscaler and InQuest reports. They include Chrome, Edge, Firefox, and Opera browsers, as well as browser-based cryptocurrency wallets TronLink, BinanceChain, Coinbase Wallet, MetaMask, and many others.

The Cyfirma report states that industry "veterans" have tested the effectiveness of the malware and confirmed that the program has become a powerful information theft tool.

Experts also point out that Mystic developer banned using the program in CIS countries and added an exception for those regions to its code.