OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month
Summary
Researchers have identified OnyxC2, a new stealer malware that targets over 200 applications and extensions. It employs advanced evasion techniques such as encrypted payloads, DLL sideloading, and in-memory execution to avoid detection. This malware is being offered to cybercriminals for a subscription fee of $250 per month, providing them with sophisticated theft capabilities.
IFF Assessment
The development and availability of sophisticated malware like OnyxC2 pose a significant threat to individuals and organizations, as it equips cybercriminals with advanced tools for data theft and other malicious activities.
Defender Context
Defenders should be aware of OnyxC2 and its evasion techniques, as it represents a new and potent threat in the malware landscape. Organizations need to ensure their endpoint detection and response (EDR) solutions are up-to-date and that users are educated about phishing and social engineering attempts that could deliver such malware.