Family comparison

Phantom StealerStealerium
Capability
StealeriumDeclining
PlatformWindowsWindows
Dark Radar infection records127199
Credentials
Browser passwordsVersion-dependentVerified
Session cookiesVersion-dependentVerified
Refreshing expired sessions——
AutofillDark Radar observationDark Radar observation
macOS Keychain——
2FA and password managers——
Financial
Saved cardsDark Radar observationDark Radar observation
Desktop crypto walletsVersion-dependentVerified
Wallet extensions——
Clipboard address replacement—Verified
Applications
Email clientsDark Radar observationVerified
FTP clients—Dark Radar observation
VPN clients—Verified
Messaging applicationsVersion-dependentVerified
Gaming platformsDark Radar observationVerified
System
File collection—Dark Radar observation
Screenshot—Verified
System inventoryDark Radar observationVerified
Behavior
Additional payload download——
Persistence——
Anti-analysis—Verified
Verified
Version-dependent
Reported
Dark Radar observation
Not observed