Alleged Sale of the AURA Stealer Malware Toolkit

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

On July 8, 2025, a threat actor identified as AuraCorp advertised a powerful data-stealing malware product known as AURA Stealer on a dark web marketplace. Designed to infiltrate and exfiltrate sensitive data from hundreds of sources, this product is positioned as a professional-grade infostealer with support for over 110 browsers, 70+ applications, and more than 250 browser extensions. It comes equipped with anti-debugging, obfuscation, and a comprehensive command-and-control (C2) panel designed for scalability and user customization.

📊 Key Details