Description
SantaStealer is an information stealer that harvests credentials, browser data, and other sensitive information from infected systems. Its operators distribute it through phishing links, fake software downloads, and loader chains, and stolen data flows to panels used for account takeover or resale. Detections under this name should trigger credential resets, because cyberattackers can replay stolen browser session data immediately.
Stats
- First seen
- December 2025
- Last seen
- October 2026
Also known as
Santastealer
Alert name variants
| Alert Name |
|---|
| Win64.Spyware.Santastealer |
| Win64.Trojan.Santastealer |
| Win64.Trojan.SantaStealer |