Security1 hOctober 23, 2026, 16:31

StealC seller returns with Stadia RAT after Operation Endgame takedown

Four months after Operation Endgame shut down the StealC infostealer, its seller has released Stadia, a remote access trojan built on the same code. The malware bundles HVNC, remote CMD, a file explorer, a process manager and a loader, with subscriptions priced from $300 to $900 a month.

HackerNoon

Open source

StealC seller returns with Stadia RAT after Operation Endgame takedown

Stadia is built on StealC v3.5 code and sold on subscriptions from $300 to $900 a month
Modules include HVNC, Remote CMD, File Explorer, Process Manager and a loader
Former StealC customers get a free month on the $900 Pro tier
In June Operation Endgame seized 326 servers and 142 domains, recovering 25 million credentials

#StealC#Stadia#Varonis

AvisLoader: New Windows Malware Loader Uses Tox P2P Network to Resist Takedowns

Security

FakeGit malware campaign returns with 17,610 malicious GitHub repos

Security

DarkMe RAT returns with plain phishing instead of zero-days

Business

StealC seller returns with Stadia RAT after Operation Endgame takedown

AvisLoader: New Windows Malware Loader Uses Tox P2P Network to Resist Takedowns

FakeGit malware campaign returns with 17,610 malicious GitHub repos

DarkMe RAT returns with plain phishing instead of zero-days

Test of 100 x402 sellers: 87% of paid calls returned real answers, but almost no buyers