Trusted Reviews is supported by its audience. If you purchase through links on our site, we may earn a commission. Learn more.

New Vega Stealer malware seizes payment info from Chrome and Firefox

New malware designed to steal financial data and passwords from Chrome and Firefox has been discovered by researchers.

Proofpoint says the malicious software, called Vega Stealer, goes after payment information, saved credit card details, sensitive documents and passwords on infected machines.

Related: Internet security guide

The malware is being distributed via email, as an attachment named “brief.doc”. Some of these are being sent to individuals, but others are going to distribution lists.

Strangely enough, the people behind Vega Stealer appear to be very picky when it comes to their victims. According to the researchers, it is currently only targeting “a narrow set of companies in the Marketing/Advertising/Public Relations and Retail/Manufacturing industries”.

One of the subject lines they’ve associated with the malware reads: “Online store developer required”.

“While Vega Stealer is not the most complex or stealthy malware in circulation today, it demonstrates the flexibility of malware, authors, and actors to achieve criminal objectives,” said Proofpoint.

“Because the delivery mechanism is similar to more widely distributed and mature threats, Vega Stealer has the potential to evolve into a commonly found stealer. We will continue to monitor this threat as it propagates in the wild.”

The best way to protect yourself is by approaching all attachments with caution. If you don’t know where it came from, it’s better to ignore it.

Do you know somebody who’s been caught out by a phishing attack? Share your experiences @TrustedReviews.

Why trust our journalism?

Founded in 2004, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.

Today, we have 9 million users a month around the world, and assess more than 1,000 products a year.

author icon

Editorial independence

Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.

author icon

Professional conduct

We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.