Sextortion with a twist: Spyware takes webcam pics of users watching porn

A troubling new trend in cybercrime has emerged with the rise of a sophisticated spyware that automates sextortion tactics. Traditionally, sextortion involves hackers hijacking victims’ webcams or blackmailing them with intimate images they were tricked into sharing. However, this new variant significantly escalates the threat by actively monitoring when users are browsing adult websites. Researchers at Proofpoint recently uncovered an alarming open-source malware known as Stealerium, which has been linked to numerous cybercriminal operations since May. This malware is designed not only to infiltrate computers and harvest sensitive information, such as banking details and login credentials but also to take explicit screenshots and photographs of users through their webcams while they are viewing adult content. Once these images are captured, they are sent directly to the hacker, who can then use them as leverage for blackmail. Selena Larson, a researcher at Proofpoint, emphasized the invasive nature of this technology, noting that it adds a humiliating dimension to the already serious privacy violations typical of infostealers. "It's gross,” Larson remarked, expressing her disdain for the malware’s capabilities. Proofpoint’s investigation into Stealerium was prompted by its detection in thousands of emails sent by two relatively minor hacker groups. Intriguingly, this malware is publicly available as a free and open-source tool on GitHub, with its developer, a London-based individual known as witchfindertr, claiming it is intended for educational purposes only. This raises serious questions about the implications of such tools being accessible to malicious actors.