OnyxC2 is a newly identified Malware-as-a-Service platform available on criminal underground markets for approximately $250 per month, targeting credentials and session data across 210+ applications and browser extensions in Windows environments. The subscription model puts enterprise-grade infostealing and covert remote access capabilities within reach of low-skill threat actors, significantly broadening the potential attacker pool. Organizations with credential-rich endpoints, browser-based workflows, or inadequate endpoint detection controls face meaningful risk of credential compromise and unauthorized system access.