Threats Tagged 'stadia'

StealC malware has resurfaced as Stadia, a remote access trojan (RAT) that incorporates StealC's original code. Stadia extends capabilities beyond simple data theft to include hidden desktop control, live command shell, file management, process management, and in-memory loading. It communicates via plain HTTP to hardcoded IPs using RC4 encryption with Base64 encoding and persists through hidden scheduled tasks in randomized directories mimicking legitimate updaters. The operator targets former StealC customers with subscription offers. No official patches or fixes are available, and no known exploits in the wild have been reported.