Not Safe for Work/Sextortion: Stealerium & Phantom Infostealers

[Wrecker4923]

Content source

https://www.proofpoint.com/us/blog/threat-insight/not-safe-work-tracking-and-investigating-stealerium-and-phantom-infostealers

A few things are notable here. First, Stealerium does not seem to discriminate when it comes to data theft. Whereas some stealers may target specific data types, focusing on browser form data or email data, for example, Stealerium has the capabilities to steal a larger variety of data types.

Second, the malware has a feature that focuses on pornography-related data. It’s able to detect adult content-related open browser tabs and takes a desktop screenshot as well as a webcam image capture. This is likely later used for “sextortion”. While this feature is not novel among cybercrime malware, it is not often observed. The following code shows how Stealerium first detects pornography-related (“NSFW”) content in open web browsers, then takes both a desktop and webcam...

The malware queries the victim’s open browser windows to check if any of the following strings appear in the titles of open web pages. These strings are configurable by the operator of the malware...

Not just empty threats, but possible real sextortion emails!

 

[Bot]

Not just empty threats, but possible real sextortion emails!

Yeah, that's a chilling aspect of Stealerium and similar infostealers. It's not just about grabbing passwords or financial data—these creeps are weaponizing personal, intimate moments for extortion. We've seen a rise in sextortion scams where victims get emails claiming to have compromising photos or videos, often backed by real data stolen via malware like this.

If you're dealing with something like this or want to protect yourself:

• Run a full scan with reputable antivirus like Malwarebytes or ESET to check for infections.
• Enable webcam covers or software blocks when not in use.
• Be cautious with browser extensions and downloads—stick to trusted sources.
• If you get a sextortion email, don't engage or pay; report it to authorities like the FBI's IC3.

Stay safe out there! If you have more details on your setup, we can offer tailored advice.

 

[Sorrento]

I've had a couple of emails (not related to Stealerium though) that I imagine most have informing me that videos taken from my webcam & screenshots will be forwarded to everyone with the intent of blackmailing me, which is interesting because on a PC I actually don't use a webcam which is amusing to me but must be frightening to the less informed users who will believe this blackmailing garbage & either pay up (some must) or worry greatly.

 

[Parkinsond]

I've had a couple of emails (not related to Stealerium though) that I imagine most have informing me that videos taken from my webcam & screenshots will be forwarded to everyone with the intent of blackmailing me, which is interesting because on a PC I actually don't use a webcam which is amusing to me but must be frightening to the less informed users who will believe this blackmailing garbage & either pay up (some must) or worry greatly.

It is definitely scam; I had it too, using old PC with no webcam or mic.

 

[ForgottenSeer 114717]

Second, the malware has a feature that focuses on pornography-related data. It’s able to detect adult content-related open browser tabs and takes a desktop screenshot as well as a webcam image capture. This is likely later used for “sextortion”.

I cannot imagine that there are many people in the world nowadays that would care about anyone knowing about their online porn activities, except in the cases of kiddy and animalia porn.

To the "attackers," I'd be like: "My porn habits are not a secret. Everybody already knows without asking."

 

[Zero Knowledge]

Why even bother baiting them? Waste of time. Just mark as spam and move on to watching cat videos.

 

[ForgottenSeer 114717]

Why even bother baiting them? Waste of time. Just mark as spam and move on to watching cat videos.

Sort of like "Why kick the hornet's nest? You'll only get stung!"?

I don't worry about it.



I enjoy taunting the idiot(s) that attempt to sextort meh - or anyone else. They got short d i k energy. And a peanut sized brain.

 

[Zero Knowledge]

Yeah trolling scammers is fun but it's a waste of time. Let the pro scam baiter's do their job. Those Youtube videos are gold.