Nexus is a new stealer that has recently hit the marketplace, its sales thread boasts that it steals from multiple commonly found programs and will send this data to an easy to use web panel. Here the actor is able to read logs that have been sent from infected computers, mark them as checked and also tag them with a comment. The actor can also add a direct link to any windows executable that the malware will then download & execute. The thread claims that the stealer will steal data from the following programs:

All Browser
.dat files of cryptocurrency wallets
Authy
Telegram
Discord

DT Stealer V1.3 + Source

Steam
FileZilla
WinSCP
TotalCommander
WindowsSecureVault
Internet Explorer & Edge
Pidgin
PSI & PSI+
NordVPN & ProtonVPN
Text file grabber

Collecting OpenVPN Session and Authorization Data
Collection of detailed information about Steam (based on customer wishes)
WiFi Profile Data Collection
Collecting profiles from Credmanager
Saving cookies in .log and .txt formats (based on customer wishes)
Fixed error creating data directories
Chromium autocomplete collection fixed

ICQ:653580170
Whatsapp +79017473945
jabber: russianhackerclub@jabber.ru