Description
MeduzaStealer (Meduza Stealer) is an information stealer that surfaced in 2023 as a successor to the Aurora stealer. Ukrainian authorities attributed mass campaigns using it against Ukraine and Poland to the UAC-0050 group, and later stealer campaigns exploiting the CVE-2024-21412 vulnerability delivered it alongside other stealers such as Lumma Stealer.
Stats
- First seen
- March 2024
- Last seen
- October 2026
Also known as
Meduzastealer
Alert name variants
| Alert Name |
|---|
| Win32.Ransomware.MeduzaStealer |
| Win32.Spyware.Meduzastealer |
| Win32.Trojan.Meduzastealer |
| Win32.Trojan.MeduzaStealer |
| Win64.Spyware.Meduzastealer |
| Win64.Spyware.MeduzaStealer |
| Win64.Trojan.MeduzaStealer |