Hackers Use Leaked Shellter Tool License to Spread Lumma Stealer and SectopRAT Malware

Hackers are exploiting Shellter, a legitimate red teaming tool, to distribute stealer malware in various cybercrime campaigns. An update was released to fix the leak, but threat actors continue to weaponize the software for malicious purposes. #Shellter #LummaStealer #RhadamanthysStealer #SectopRAT

Keypoints

Threat actors repurposed Shellter to distribute malware after a license leak.
An update has been issued to address vulnerabilities in Shellter Elite version 11.0.
Malicious campaigns use polymorphic obfuscation techniques to evade detection.
Shellter’s misuse has been linked to campaigns involving Lumma Stealer, Rhadamanthys Stealer, and SectopRAT.
Elastic Security Labs highlighted the abuse of commercial tools for malicious distribution in 2025.