#maranhao-stealer

#maranhao-stealer

Maranhão Stealer spreads via social-engineering sites offering pirated software, uses reflective DLL injection and persistence mechanisms to steal credentials and cryptocurrency data.

Maranhão Stealer spreads via cracked-software sites to steal browser credentials and cryptocurrency data using Node.js payloads, reflective DLL injection, persistence mechanisms, and system reconnaissance.