Cybersecurity experts have warned that a new type of malware called Stealerium can secretly record porn users through their webcams and use the footage for blackmail. The malware also steals sensitive data, including passwords, banking details, and cryptocurrency information.
Stealerium spreads mainly through phishing emails that appear to come from banks, streaming platforms, or charities. Common subject lines include “Payment Due,” “Court Summons,” or “Invoice Attached.” Clicking a link or opening an attachment in these emails can install the malware on a device.
Once installed, the malware scans the computer for sensitive information and monitors browser activity. If it detects keywords such as “porn” or “sex,” it takes screenshots and webcam snapshots, which are then sent to cybercriminals through platforms like Discord, Telegram, or email.
Researchers at cybersecurity firm Proofpoint say this marks a disturbing development in “sextortion” schemes, where attackers exploit shame to pressure victims into paying. While no confirmed victims of Stealerium’s webcam function have been reported, its existence signals a serious privacy risk.
Experts advise users to be cautious with emails, avoid clicking suspicious links, and type website addresses manually. Additional precautions include covering webcams when not in use, keeping antivirus software updated, and installing system security patches regularly.
“Hackers are trying to monetise people one at a time, often targeting individuals who may be too embarrassed to report it,” said Selena Larson, a Proofpoint researcher.
