Identity & Access
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
Hi, what are you looking for?
SecurityWeek
All posts tagged "infostealer"
Malware & Threats
The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer.
Malware & Threats
The medtech giant has been working on restoring systems affected by the cyberattack conducted by the Handala hackers.
Cybercrime
The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement.
Malware & Threats
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
Malware & Threats
The malware targets browser and cryptocurrency wallet data, along with system information and user files.
Malware & Threats
Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.
Malware & Threats
The information stealer abuses legitimate APIs and libraries to exfiltrate data to Discord webhooks.
Data Breaches
The initial access broker (IAB) relies on credentials exfiltrated using information stealers to hack organizations.
Malware & Threats
The ‘download’ button on the official EmEditor website served a malicious installer.
Malware & Threats
A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.
Tracking & Law Enforcement
An individual believed to have been involved in the operation of VenomRAT was arrested recently in Greece.
Data Breaches
The Japanese media giant says compromised Slack credentials were used to steal employee and business partner information.
Malware & Threats
Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense.
Malware & Threats
The packages deployed malicious code harvesting system information, credentials, tokens, API keys, and other sensitive information.
Data Breaches
The email addresses were pulled from various sources and 16.4 million of them were not present in previous data breaches.
Malware & Threats
The identities of alleged core members of the Lumma Stealer group were exposed in an underground doxxing campaign.
Malware & Threats
Threat actors rely on malicious GitHub repositories to infect LastPass’s macOS users with the Atomic infostealer.
Malware & Threats
Competition among malware-as-a-service developers has transformed infostealers into refined, accessible tools for cybercriminals worldwide.
Malware & Threats
SonicWall says a modified version of the legitimate NetExtender application contains information-stealing code.
Data Breaches
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
Network Security
Supply Chain Security
Artificial Intelligence
Vulnerabilities
Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device's web management interface.
Network Security
Email Security
Artificial Intelligence
