Arkanix Stealer

Reported Context (3)

A new infostealer named ‘Arkanix Stealer’ operated as a malware-as-a-service (MaaS) enterprise in a one-shot campaign, Kaspersky says. Kaspersky Details Arkanix Stealer as Its Operations Appear to End
Arkanix Stealer, an informationâstealing operation promoted on dark web forums in late 2025, offered modular Python and premium C++ builds with VMProtect and extensive dataâtheft capabilities across browsers, Kaspersky Finds Signs Arkanix Stealer Was an LLM-Assisted Experiment
In October 2025 researchers discovered forum posts advertising a previously unknown MaaS called “Arkanix Stealer” offering both native C++ and Python implants, a configurable control panel, and payload generation. Researchers Detail Arkanix Stealer’s C++ and Python Implants

MITRE ATT&CK (21)

Products (12)

Tools (2)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.