FadeStealer is an information stealer named by ASEC and used by RedEyes in a May 2023 intrusion chain. It captures screenshots and keystrokes, collects data from removable devices and smartphones, records microphone audio, and periodically compresses stolen data into password-protected split RAR archives for exfiltration.