The looks actively for wallet extensions and passwords on Google searches. The cybercriminals obtain valuable account information, such as copied passwords and private keys. They then use this information to access accounts and steal funds.
Similarly, StilachiRAT scans the systems to get details of the Operating system and other devices in use. It tracks sessions of Remote Desktop Protocol (RDP) so that the attackers can later impersonate users. This, as a result, enables further network infiltration.
