Skip to content

Epsilon Stealer

Epsilon Stealer is an Electron-based information-stealing malware family associated with browser credential, cookie, and payment-card theft.

Epsilon Stealer

Family profile

Epsilon Stealer is an Electron-based information-stealing malware family associated with browser credential, cookie, and payment-card theft. SonicGlyde, a Discord-focused stealer identified as an Epsilon Stealer variant, captures browser cookies, credentials, and credit-card information. Stolen credentials and cookies can facilitate unauthorized account access and session hijacking.

Epsilon Stealer has been distributed through social-engineering lures targeting Discord users. In an August 2023 campaign, victims were offered a purported new game; downloading and executing it installed the stealer. This distribution method exploits users’ interest in games and trust in interactions on Discord. No specific threat actor, industry targeting, or supported operating-system scope is firmly established.

Capabilities

  • Credential Theft
  • Session Hijacking

Samples

Recent samples

2 sandbox samples in the Derp library, newest 2 shown

MITRE ATT&CK

Epsilon Stealer in ATT&CK

5 distinct techniques