The DarkCloud Stealer information stealing malware was first spotted in 2022 and gathers sensitive information such as credit card numbers passwords social security numbers and personal data from compromised mobile devices and computer systems.
The malicious software is distributed through phishing campaigns and uses a multi-stage process to carry out the infection.
Sensitive data is exfiltrated via SMTP Telegram Web Panel and FTP.