An information stealer targeting Windows, macOS, and Linux. Harvests credentials from cloud platforms, source control, package registries, AI assistants, browsers, SSH, and cryptocurrency wallets. Exfiltrates data via AES-256-GCM encrypted TAR archives.