Threat actors buy new BlueFox Stealer to exfiltrate data

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

A Russian-speaking user named distamx has been selling BlueFox Stealer as malware-as-a-service since December 2021. A subscription to the customizable malware costs $350 per month on underground forums. BlueFox Stealer attacks are likely to increase because distamx has closed the sales due to an overwhelming response from threat actors.