Meduza Stealer emerged as a competitive entry in the crowded infostealer market, offering browser credential theft, cookie extraction, and cryptocurrency wallet targeting. Its developers marketed the malware through established cybercrime channels with regular feature updates.
In a notable law enforcement action, Russian authorities detained individuals linked to Meduza's development. While takedowns disrupt individual families, the underlying stealer-as-a-service business model continues through new brands and forks.
See coverage of the Meduza developer arrests and the broader criminal ecosystem in de-anonymizing threat actors with infostealer intelligence.