Malware & Tooling · Credential Theft
BlackFog found a licensed infostealer kit called Venom Stealer sold by subscription. Operators configure per-user Cloudflare domains and use professional.
3 sources · Apr 1
Dark Reading
Venom Stealer MaaS Platform Commoditizes ClickFix Attacks
A new service on the cybercrime market provides automated capabilities to create persistent information-stealing social engineering attacks.
originalInfosecurity Magazine
New Venom Stealer MaaS Platform Automates Continuous Data Theft
Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration
originalSecurityWeek
Venom Stealer Raises Stakes With Continuous Credential Harvesting
Licensed malware with built-in persistence and automation enables attackers to continuously siphon credentials, session data, and cryptocurrency assets.
originalPart of the PlainSec briefing for 2026-04-02
Every edition of this story: VenomStealer campaign update