Anatomy of Celestial Stealer: Malware-as-a-Service Revealed

The Celestial Stealer is a JavaScript-based infostealer packaged as an Electron or NodeJS application for Windows 10 and 11, acting as MaaS on Telegram platform, targeting Chromium and Gecko-based browsers, along with specific applications and cryptocurrency wallets, employing anti-analysis, injection, and FUD techniques. Disguised as Discord promotion generator and VR Chat NSFW application, and marketed with active presence on the Telegram platform