NOVABLIGHT is a sophisticated NodeJS-based infostealer marketed as a Malware-as-a-Service (MaaS) offering primarily focused on stealing user credentials and compromising cryptocurrency wallets. It is the product of a French-speaking threat actor group known as Sordeal Group, which has also released other malware such as Nova Sentinel and MALICORD. The infrastructure supporting NOVABLIGHT leverages Telegram and Discord for sales, licensing, and community interaction, with licenses offered for durations between one and twelve months.