Eternity Stealer

Last reviewed: October 13, 2026

Eternity Stealer is a type of malware designed to illicitly collect sensitive information from infected systems. It primarily targets credentials, financial information, and other personal data. Eternity Stealer is part of a broader category of malicious software known as "information stealers," which are often used by cybercriminals to facilitate identity theft, financial fraud, and other forms of cybercrime. As of October 2023, Eternity Stealer continues to pose a threat to individuals and organizations worldwide, with its developers frequently updating its capabilities to evade detection.

Overview

Eternity Stealer is a malicious software program that focuses on extracting sensitive information from compromised systems. It is typically distributed through various infection vectors, including phishing emails, malicious websites, and software vulnerabilities. Once installed, Eternity Stealer operates silently, collecting data such as login credentials, credit card numbers, and personal identification information. This data is then transmitted to the attacker's command and control (C2) server, where it can be used for malicious purposes.

History

The history of Eternity Stealer is marked by its continuous evolution to adapt to changing cybersecurity defenses. Initially detected in the early 2020s, Eternity Stealer has undergone several iterations, each with enhanced features and improved evasion techniques. Cybersecurity researchers have noted that the malware's developers are highly active, frequently releasing updates to maintain its effectiveness against modern security measures.

Technical characteristics

Eternity Stealer is characterized by its modular architecture, allowing it to incorporate various functionalities depending on the attacker's needs. The malware typically includes features for keylogging, screen capturing, and clipboard monitoring, enabling it to capture a wide range of sensitive information. Eternity Stealer is often obfuscated to avoid detection by antivirus software, using techniques such as code encryption and packing.

Infection vector

Eternity Stealer is distributed through multiple infection vectors, making it versatile and challenging to defend against. Common methods of distribution include:

Phishing emails: Cybercriminals send emails containing malicious attachments or links that, when opened, install the malware on the victim's system.
Malicious websites: Users who visit compromised or malicious websites may inadvertently download the malware.
Software vulnerabilities: Attackers exploit vulnerabilities in software applications to deliver the malware without user interaction.

Notable campaigns

While specific campaigns involving Eternity Stealer are not extensively documented, the malware has been linked to several cybercriminal operations targeting various sectors. These campaigns often involve the theft of financial information and personal data, which can be sold on underground markets or used for further attacks.

Detection and mitigation

Detecting Eternity Stealer requires a combination of technical measures and user awareness. Organizations are advised to implement robust security solutions, such as antivirus software and intrusion detection systems, to identify and block the malware. Regular software updates and patch management can help close vulnerabilities that Eternity Stealer might exploit. Additionally, educating users about the risks of phishing and the importance of safe browsing practices can reduce the likelihood of infection.