In 2024, Infostealer Malware Stole Over 2.1 Billion Records

109/68 Thursday, March 20, 2025

A recent report from Flashpoint reveals that Infostealer malware has become a primary tool for cybercriminals in 2024. This type of malware has infected over 23 million devices and stolen more than 2.1 billion user account records, accounting for two-thirds of all stolen data in the past year. Infostealers have been used in sophisticated attack campaigns, including corporate system breaches, ransomware deployment, and attacks on critical infrastructure in both the public and private sectors.

Researchers found that Windows-based systems were the primary targets, particularly in corporate environments, accounting for 70% of all infections. Although some variants have been developed to attack macOS, Windows remains the primary focus due to its large user base and readily available malware development tools. One of the most widespread Infostealers is Redline, responsible for 9.9 million infections, or 43% of all attacks. Other significant malware strains in this wave include RisePro, SteaC, Lumma Stealer, and Meta Stealer.

Stolen data from Infostealer attacks has been used in large-scale cybercrime operations, such as the Snowflake hack, which impacted major corporations like AT&T and Ticketmaster. Cybercriminals gained access to user accounts, passwords, credit card information, cryptocurrency wallets, and browser session cookies, leading to severe security breaches. Analysts predict that Infostealer attacks will continue to rise in 2025 due to their low cost, ease of use, and availability on the dark web, enabling even non-technical hackers to launch attacks against organizations.

Source https://cyberscoop.com/infostealers-cybercrime-surged-2024-flashpoint/