Executive Summary
Warden Stealer (previously tracked as CallbackBeaver) emerged in 2026 as a sophisticated Rust-based infostealer marketed on Russian-speaking underground forums. It has rapidly become a prevalent threat, sold through tiered Malware-as-a-Service (MaaS) plans. The malware is notable for its specific focus on emerging technologies, being one of the first observed stealers to actively target configuration files and access tokens for AI assistants and agentic coding tools like Claude, Grok, and Cursor.
The infection chain utilizes a custom Rust loader that employs heavy code morphing, dynamic API lookups, and anti-virtual machine (VM) checks. Once executed, it typically injects into trusted processes like explorer.exe to evade detection. Beyond credential theft, it features a cryptocurrency clipper capable of swapping wallet addresses across ten different networks and can bypass Chromium's Application-Bound Encryption (ABE) to extract sensitive browser data.
The rise of Warden Stealer represents a shift in adversary focus toward AI-integrated development environments. Organizations employing AI coding agents face significant risks of supply chain compromise and credential theft, as the malware can exfiltrate MCP credentials and prompt histories that may contain sensitive proprietary information.