Infostealer
A category of malware whose primary objective is to steal sensitive data such as user credentials, session tokens, browser passwords, cookies, and cryptocurrency wallets. It typically exfiltrates data silently to command-and-control (C2) servers and spreads through channels including phishing emails, malicious advertising, and supply-chain attacks.
Timeline (last 90 days)
Infostealers typically aim for silent persistence, completing data exfiltration within a short time and then cleaning up traces.
An information-stealing trojan (Infostealer) is a type of malware whose primary goal is to steal sensitive data such as user credentials, session tokens, browser-saved passwords, cookies, and crypto wallets; it typically does not encrypt or destroy files, but instead silently exfiltrates data to an attacker-controlled C2 server.
Typical distribution channels for Infostealers include phishing email attachments, installers disguised as cracked software, malvertising, and supply chain attacks.
LLMjacking refers to attackers stealing others' cloud account or AI service credentials and calling large language model APIs under the victim's identity and quota; it usually works together with Infostealers: first stealing API keys for cloud services or AI platforms, then using them to call models.
All Facts (4)
Infostealers typically aim for silent persistence, completing data exfiltration within a short time and then cleaning up traces.
50%UnverifiedAn information-stealing trojan (Infostealer) is a type of malware whose primary goal is to steal sensitive data such as user credentials, session tokens, browser-saved passwords, cookies, and crypto wallets; it typically does not encrypt or destroy files, but instead silently exfiltrates data to an attacker-controlled C2 server.
50%UnverifiedTypical distribution channels for Infostealers include phishing email attachments, installers disguised as cracked software, malvertising, and supply chain attacks.
50%UnverifiedLLMjacking refers to attackers stealing others' cloud account or AI service credentials and calling large language model APIs under the victim's identity and quota; it usually works together with Infostealers: first stealing API keys for cloud services or AI platforms, then using them to call models.
50%