Secret Telegram Based Backdoor Found on Prynt Stealer Malware

Researchers from Zscaler discovered a private Telegram channel-based backdoor in Prynt Stealer malware, which secretly sends a copy of the victim’s exfiltrated data to its developer when other cybercriminals use it. 

“Zscaler ThreatLabz researchers have uncovered the Prynt Stealer builder, also attributed with WorldWind, and DarkEye, has a secret backdoor in the code that ends up in every derivative copy and variant of these malware families.” reads the report by  Zscaler. “The backdoor sends copies of victims’ exfiltrated data gathered by other threat actors to a private Telegram chat monitored by the builder’s developers.”

What is prynt stealer

Prynt Stealer, which first came to light in April, has the ability to record keystrokes, steal login information from web browsers, and steal data from Telegram and Discord. A month-to-month license costs $100, and a lifetime subscription costs $900.

The analysis of Prynt Stealer by Zscaler reveals that its codebase is derived from two other open-source malware families, StormKitty and AsyncRAT, with new additions integrated, such as a  Telegram channel-based backdoor to gather the information stolen by different cyber criminals and deliver it to the malware’s author.

Additionally, the malware has an anti-analysis feature that enables it to continuously scan the victim’s process list for applications like Wireshark,taskmgr, and netstat, and if detected, to block Telegram’s command-and-control channels.

Although malicious actors have in the past used similar data-stealing strategies where the malware was distributed for free, this development marks one of the rare instances where a data stealer that is sold on a subscription basis is also sending the stolen data back to its creator.

“Note that there are cracked/leaked copies of Prynt Stealer with the same backdoor, which will benefit the malware author even without direct compensation,” the researchers said.

Zscaler said the same authors also created two additional Prynt Stealer variants known as WorldWind and DarkEye, the latter of which is packaged as an implant with a “free” Prynt Stealer builder.

All three strains are nearly identical with a few minor differences. Prynt Stealer is the most popular brand name for selling the malware, while WorldWind payloads are the most commonly observed in the wild. DarkEye is not sold or mentioned publicly, however, it is bundled as a backdoor with a “free” Prynt Stealer builder. 

Additionally, the builder is intended to drop and run the Loda RAT remote access trojan, an AutoIT-based malware that can access and exfiltrate user and system data, function as a keylogger, take screenshots, start and stop processes, and download additional malware payloads via a connection to a C2 server.

“The Prynt Stealer author went a step further and added a backdoor to steal from their customers by hardcoding a Telegram token and chat ID into the malware. As the saying goes, there is no honor among thieves.”

“The free availability of source code for numerous malware families has made development easier than ever for less sophisticated threat actors,” the researchers concluded.

29 thoughts on “Secret Telegram Based Backdoor Found on Prynt Stealer Malware”

  1. Your article gave me a lot of inspiration, I hope you can explain your point of view in more detail, because I have some doubts, thank you.

  2. Your article gave me a lot of inspiration, I hope you can explain your point of view in more detail, because I have some doubts, thank you.

  3. Your article gave me a lot of inspiration, I hope you can explain your point of view in more detail, because I have some doubts, thank you.

  4. Забота о обители – это забота о спокойствии. Утепление наружных стен – это не только стильный внешний вид, но и гарантия сохранения тепла в вашем уголке уюта. Наша команда, группа специалистов, предлагаем вам сделать ваш дом в идеальное жилище.
    Наши творческие решения – это не просто тепловая обработка, это искусство с каждым слоем. Мы осуществляем совершенному сочетанию между формой и содержанием, чтобы ваш дом стал не только пригодным для жизни, но и великолепным.
    И самое главное – приемлемая цена! Мы полагаем, что профессиональные услуги не должны быть неприемлемо дорогими. [url=https://ppu-prof.ru/]Средняя цена утепления фасада[/url] начинается всего от 1250 руб/кв. метр.
    Современные технологии и высококачественные строительные материалы позволяют нам создавать термомодернизацию, которая гарантирует долгий срок службы и надежность. Оставьте в прошлом холодные стены и лишние затраты на отопление – наше утепление станет вашим надежным экраном от холода.
    Подробнее на [url=https://ppu-prof.ru/]интернет-ресурсе[/url]
    Не откладывайте на потом заботу о благополучии в вашем доме. Обращайтесь к профессионалам, и ваш уголок станет настоящим архитектурным шедевром, которое принесет вам тепло и радость. Вместе мы создадим обители, где вам будет по-настоящему комфортно!

  5. Переутомились остывать зимой и переплатить за отопление?
    Термоизоляция фасада – решение проблемы!
    Компания “Тепло и уют” с 2010 года предлагает опытные услуги по обогреву фасадов зданий любой сложности. За это время мы зарекомендовали себя как верный и благонадежный партнер, о чем свидетельствуют множественные отзывы наших клиентов.
    Почему стоит выбрать нас?
    доступные цены. [url=https://stroystandart-kirov.ru/]Утепление дома снаружи москва[/url] от 1350 руб/м2.
    Опыт и профессионализм. Наши бригады имеют массивный опыт работы в сфере термоизоляции фасадов. Мы используем только аттестованные материалы и новые технологии, что гарантирует повышенное качество работ.
    Частный подход. Мы подберем для вас оптимальное решение с заметанием ваших потребностей и бюджета.
    Бесплатная консультация и выезд замерщика. Наши специалисты бесплатно проконсультируют вас по всем вопросам обогрева фасада и произведут аккуратные замеры.
    Наш сайт: [url=https://stroystandart-kirov.ru/]http://www.stroystandart-kirov.ru/[/url]
    Уверенность качества. Мы предоставляем обеспечение на все виды работ.
    Звоните нам сегодня и получите бесплатную консультацию!
    Мы сделаем ваш дом уютным, теплым и экономичным!

  6. Переутомились промерзать зимой и переплатить за отопление?
    обогрев фасада – решение проблемы!
    Компания “Тепло и уют” с 2010 года предлагает опытные услуги по теплоизоляции фасадов зданий любой сложности. За это время мы зарекомендовали себя как надежный и благонадежный партнер, о чем свидетельствуют многочисленные отзывы наших клиентов.
    Почему стоит выбрать нас?
    доступные цены. [url=https://stroystandart-kirov.ru/]Утепление дома снаружи цена квадратного метра[/url] от 1350 руб/м2.
    опытность и компетентность. Наши бригады имеют крупный опыт работы в сфере термоизоляции фасадов. Мы используем только засвидетельствованные материалы и новые технологии, что гарантирует высочайшее качество работ.
    Личный подход. Мы подберем для вас лучшее решение с учетом ваших потребностей и бюджета.
    Бесплатная консультация и выезд замерщика. Наши специалисты бесплатно проконсультируют вас по всем вопросам теплообеспечения фасада и произведут аккуратные замеры.
    Наш сайт: [url=https://stroystandart-kirov.ru/]https://www.stroystandart-kirov.ru[/url]
    Обеспечение качества. Мы предоставляем уверенность на все виды работ.
    Звоните нам сегодня и получите бесплатную консультацию!
    Мы сделаем ваш дом теплым, теплым и экономичным!

  7. Уважаемые Друзья!
    Вводим вам новое моду в мире стилистики домашней обстановки – шторы плиссе. Если вы стремитесь к высшему качеству в всех части вашего домашнего, то эти завесы подберутся выдающимся решением для вас.
    Что делает шторы плиссе настолько же оригинальными? Они объединяют в себе в себе элегантность, действенность и практичность. Благодаря характерной литере, инновационным материалам, шторы плиссе идеально соответствуют для какова угодно пространства, будь то палата, дом, плитки или профессиональное пространство.
    Закажите [url=https://tulpan-pmr.ru]плиссированные жалюзи на окна[/url] – воссоздайте уют и великолепие в вашем доме!
    Чем манят шторы плиссе для вас? Во-первых, их индивидуальный декор, который добавляет к шарм и грацию вашему месту. Вы можете подобрать из различных текстур, цветов и подходов, чтобы выделить самобытность вашего дома.
    Кроме того, шторы плиссе предлагают обширный ряд эксплуатационных возможностей. Они могут управлять степень сияния в пространстве, предохранять от солнечных лучей, обеспечивать интимность и формировать уютную атмосферу в вашем доме.
    Мы веб-сайт: [url=https://tulpan-pmr.ru]https://tulpan-pmr.ru[/url]
    Мы сами поддержим вам подобрать шторы плиссе, какие замечательно подходят к для вашего интерьера!

  8. imenzahedan company is known as one of the top companies in the field of security with an experienced and professional team in the field of protection and security services. This company provides quality and security to its customers by providing installation and repair services of wall protection fence, deer antler protection, window protection, double-glazed window, accordion door, villa iron door, electric shutter, parking jack, automatic glass door, barricade and burglar alarm. It provides a very high Using the best equipment and high quality materials, imenzahedan always tries to respond to the needs of its customers with the best services and reasonable prices and provide them complete satisfaction. The main goal of imenzahedan Company is to provide quality and cheap services to customers in order to fully respond to their security needs. https://imenzahedan.ir/

  9. ahanhefaz company is one of the top manufacturers and providers of building security and beauty products in Iran. Using the best primary parts and modern technology, this company produces a variety of products, including building guardrails, window guards, accordion doors, villa iron doors and wrought iron patio doors, double-glazed windows and installation services for security products such as electric shutters, parking jacks. offers burglar alarms and automatic glass doors to its customers. Also, due to the effort for the best services, this company offers facilities such as free consultation, cost estimation, installation, repair and after-sales service to its customers. Delivery and installation of goods on time and customer satisfaction are other features of ahanhefaz company. website link: https://ahanhefaz.com/

  10. ahanhefaz In Farsi, it is آهن حفاظ is a manufacturer of all kinds of apartment door guards, including standard accordion doors with excellent quality and reasonable prices, all kinds of sliding doors, rail doors, cheap accordion guards, classic accordion doors, simple iron doors, anti-theft guards for apartment doors. Apartment door protectors are designed and manufactured with the best type of iron material, including 3 fabric hinges for anti-damage and 8-mil lock and furnace color. Metal accordion door purchase website : https://ahanhefaz.com/

  11. Like any other electrical device, the electric shutter is made of professional components and parts based on modern science; The technology of this tool is such that it meets the needs of people in modern society with all the hustle and bustle and insecurity in it; One of the clear examples of this in the design and construction of shutters is compliance with the requirements and standards of buildings and houses that are built according to modern global architecture. Ordinary shutters were used for shops since ancient times. Today, with the advancement of science and technology, all kinds of shutters have entered the market that work with a motor and can be opened and closed easily using a remote control. ahanhefaz In Farsi, it is آهن حفاظ is a website : https://ahanhefaz.com/

  12. ahansaze company is in Persian language آهن سازه , It is proudly committed to providing installation and manufacturing services of all kinds of quality iron products. This company, with expertise in building wall protection fence, deer antler protection, accordion door, window protection, iron and laser model building entrance door, wrought iron villa door, staircase and balcony railing made of metal and CNC, provides a decent service to its customers. Offers. Also, the installation services of electric shutters, parking jacks, automatic glass doors, electric awnings and parking barriers are also considered as part of Ahansaze services. By offering sales services of pipe, scaffolding and mansman, concrete jack and formwork, and double-glazed windows, ahansaze company ensures that various construction needs are met with the best parts and materials and with high precision. Company website: https://ahansaze.com/

  13. ahansaze company is in Persian language آهن سازه , The price of protection for each window can be calculated based on the following formula: The price of window protection = (price per square meter of protection * window dimensions) + installation fee. Iron window guards are produced in different types, including simple, wrought iron and classic. Each of these types of protectors has a different price. For example, wrought iron and classic guards are usually more expensive than plain guards. The size of the windows has a great impact on the price of protection. Larger windows require more protection, which can increase the cost. The design and beauty of the window guard also affects its price. Guards with special and beautiful designs may cost more. Different types of installation such as fixed, movable or double glazing can also affect the final price. Iron prices in the market are constantly fluctuating. These fluctuations also affect the price of iron window guards. Company website: https://ahansaze.com/

  14. felezsazeh technical group ( فلز سازه ) is one of the largest producers of iron protection for building doors (accordion door) and metal window protection fence and wall protection, which has started its activity since 2013 and has a monthly production capacity of 3000 The meter has types of deer antler hedges, bush hedges, bayonet reed hedges, and lilium. The goal of felezsazeh is the peace of mind and safety of your loved ones. Felezsazeh company, with more than forty years of experience in the field of security and protection of places, is one of the leaders of the metalworking, casting and plumbing industry. Relying on its technical knowledge and advanced equipment, this company offers a variety of products to create complete security around the premises. Among the valuable products of this company, we can mention burglar alarms, wall protection, home door protection, electric shutters, parking door jacks, automatic glass doors, arm restraints and other similar products. Using advanced technologies and superior security standards, these products prevent unauthorized people from entering the environment. Relying on experienced and expert staff, felezsazeh company is always at the service of its customers in order to maintain their safety and security. website: https://felezsazeh.com/

  15. What Is Sugar Defender? Sugar Defender is a natural blood sugar support formula created by Tom Green. It is based on scientific breakthroughs and clinical studies.

  16. Hi, There’s no doubt that your website might be having browser compatibility problems.
    When I look at your web site in Safari, it looks fine however
    when opening in IE, it has some overlapping issues.

    I simply wanted to provide you with a quick heads up! Besides that, wonderful blog!

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top