Lightning Stealer

Malware type
credential-stealer, spyware
Family
Malware family
Profile updated
2026-07-07 15:09:38

Targeted industries: financial-services technology-and-telecommunications

Context

Lightning stealer can target 30+ Firefox and Chromium-based browsers and steal crypto wallets, Telegram data, Discord tokens, and Steam user’s data. Unlike other info stealers, Lightning Stealer stores all the stolen data in the JSON format for exfiltration.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Lightning Stealer (report)
  • blog.cyble.com — Inside Lightning Stealer (report)

External references