Nyxar Stealer with potential Turkish roots 🇹🇷, sold as malware-as-a-service with of 60 modules, including: 🪝 Browser credential and cookies stealer 💬 Messaging app credential stealer (Discord, Telegram, etc) 👛 Crypto wallet stealer 🎮 Gaming app credential stealer (Steam, Epic, etc) Probably of turkish origin: 🕑 Client quotas reset at 03:00 Instanbul time 🇹🇷 tr-TR formatting and error messages in bot admin panel Botnet C2s: 📡nyxar .cc 📡nyxar .lol 📡nyxarstealer .lol 📡nyxarst .lol 📡polnet .lol Malware samples: https://bazaar.abuse.ch/browse/signature/NyxarStealer