A new infostealing malware known as “ZingoStealer” was released on April 14th, 2022 through a dark web post for free. This malware was developed by a crimeware-related threat actor known as “Haskers Gang,” though they have also stated that ownership is changing hands. Before the malware was officially given to the new threat actor, Haskers Gang decided to post a free binary of the malware, allowing any threat actor or script kiddie to utilize its functionality. The group has also offered to sell the source code of the malware for $500 and a version of the binary that is obfuscated using a custom made crypter known as “ExoCrypt” for $3. While the malware has only been in development for a month, it includes multiple functions that allow it to download additional malware, harvest data from common browsers and cryptocurrency wallets, exfiltrate data and update through a Telegram channel, and install a custom Monero cryptocurrency miner known as “ZingoMiner.” Haskers Gang and customers of ZingoStealer have used it to target Russian-speaking victims by masquerading it as “game cheats and pirated software,” distributed through YouTube videos and Discord channels. With the free release of this malware, CTIX analysts believe organizations as well as computer enthusiasts will be heavily targeted with ZingoStealer by unsophisticated threat actors. To mitigate this threat, organizations should utilize endpoint detection software along with antivirus to detect if this malware is downloaded or executed. As always, users should use caution when downloading software from the internet and utilize web-based virus detection software to ensure downloaded files are not malicious.