Echelon Stealer

Echelon Stealer is a Russian infostealer that is being advertised online by the malware's creator, a user who goes by the name Madcode. The threat appears to be hosted publicly on GitHub, but several of its pages have already been taken down due to GitHub's strong policy against malicious software. Unfortunately, copies of the open-source Echelon Stealer are still circulating online, and any cybercriminal with some programming background can compile and use thithreatening malware.

The purpose of the Echelon Stealer is to grab sensitive data from infected systems. Usually, infostealers tend to operate as silently as possible since their purpose is to silently steal files, passwords, conversations, and other information. By staying silent, they can continue to complete this task for long periods, without alerting the victim.

The primary features of the Echelon Stealer focus on stealing FTP and VPN credentials, cryptocurrency wallet files, specific types of files, database files used by browsers like Google Chrome and Microsoft Edge, and more. The attackers could then use this information to hijack the accounts of their victim, perform fraudulent cryptocurrency transactions, or straight-up steal FTP and VPN services.

Since the Echelon Stealer may be used by anyone, the propagation opportunities for it are endless. It is best to keep your computer secure by installing an anti-malware service, which receives regular updates for the latest malware implants.