Researchers hack malware gang via its own weak spot
An XSS flaw in StealC’s web panel allowed takeover of operator sessions, revealing millions of stolen cookies, passwords, and YouTube-based malware distribution.
Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations
A cross-site scripting vulnerability in StealC's web control panel allowed extraction of system fingerprints, session monitoring, and cookie theft from the malware's infrastructure.