Acreed Infostealer Grows Popular Among Cybercriminals via Steam
Acreed, a newly emerged infostealer since early 2025, is gaining traction among Russian-speaking cybercriminals for its stealthy approach and minimalistic logging that obscures infection pathways. It typically infects systems via trojanized installers and utilizes advanced mechanisms such as dedicated C2 channels linked to platforms like Steam and BNB Smartchain for secure data exfiltration, targeting browser credentials and cryptocurrency wallets. The malware’s design underscores a significant evolution in cyber threats, employing sophisticated tactics like JavaScript clipper modules to manipulate cryptocurrency transactions. As cybercriminals increasingly adopt such modular and stealthy tools, the risks to individuals and organizations that store sensitive information online are rising dramatically, highlighting the urgent need for enhanced cybersecurity measures.
