New Gremlin infostealer distributed on Telegram

The ever-expanding world of information stealers (infostealers) has spawned its newest variant, Gremlin Stealer.

In a report published on April 29, researchers at Palo Alto Networks’ Unit 42 shared a technical analysis of this new infostealer strain.

Gremlin Stealer has been advertised by its makers since mid-March 2025, primarily on a Telegram channel named CoderSharp.

While it appears to still be under active development, the description of this new infostealer asserts that its current version can already steal data from a wide range of software on a Windows computer, such as browsers, the computer’s clipboard and the local disk.

Read more at Infosecurity Magazine