Family comparison

StealeriumPhantom Stealer
Capability
StealeriumDeclining
PlatformWindowsWindows
Dark Radar infection records199127
Credentials
Browser passwordsVerifiedVersion-dependent
Session cookiesVerifiedVersion-dependent
Refreshing expired sessions——
AutofillDark Radar observationDark Radar observation
macOS Keychain——
2FA and password managers——
Financial
Saved cardsDark Radar observationDark Radar observation
Desktop crypto walletsVerifiedVersion-dependent
Wallet extensions——
Clipboard address replacementVerified—
Applications
Email clientsVerifiedDark Radar observation
FTP clientsDark Radar observation—
VPN clientsVerified—
Messaging applicationsVerifiedVersion-dependent
Gaming platformsVerifiedDark Radar observation
System
File collectionDark Radar observation—
ScreenshotVerified—
System inventoryVerifiedDark Radar observation
Behavior
Additional payload download——
Persistence——
Anti-analysisVerified—
Verified
Version-dependent
Reported
Dark Radar observation
Not observed