Home / Technology / Cheap Malware Steals Your Secrets for $30
Cheap Malware Steals Your Secrets for $30
10 Mar
Summary
- DarkCloud infostealer costs only $30 and harvests credentials.
- Legacy Visual Basic code helps malware evade detection.
- Low-cost tools increasingly drive corporate network compromises.
A low-cost malware strain named DarkCloud is actively circulating on the dark web for approximately $30, enabling individuals with limited technical skills to harvest sensitive data.
This infostealer, observed since around 2022, extracts browser logins, financial data, and contact information from infected machines. Its use of outdated Visual Basic 6.0 programming, compiled into a native executable, may reduce detection rates as many security tools focus on newer frameworks.
DarkCloud employs multi-layered string encryption and obfuscation to complicate analysis. It targets a wide range of applications, including browsers and email clients, storing collected data locally before transmitting it via email, FTP, Telegram, or HTTP uploads.
The proliferation of such affordable credential-stealing tools suggests that low entry cost, rather than technical sophistication, is increasingly becoming the primary driver of early-stage corporate network compromises. Attackers can leverage stolen credentials for ransomware deployment or persistent access.
