Description
SalatStealer is an information stealer that targets browser credentials and cryptocurrency wallets on infected systems. It reaches victims through phishing links, fake software downloads, and loader chains, and it harvests saved passwords, cookies, and wallet files for its operators. Detections under this name should trigger credential resets, because stolen browser data typically includes active session tokens that cyberattackers can replay immediately.
Stats
- First seen
- July 2025
- Last seen
- October 2026
Also known as
Salatstealer
Alert name variants
| Alert Name |
|---|
| Win32.Exploit.SalatStealer |
| Win32.Ransomware.SalatStealer |
| Win32.Spyware.Salatstealer |
| Win32.Spyware.SalatStealer |
| Win32.Trojan.SalatStealer |
| Win64.Spyware.Salatstealer |
| Win64.Trojan.SalatStealer |
