Cybercriminals are using infostealers to steal personal information from unsuspecting users.


 

What are infostealers?

Infostealers are a type of malware that is designed to steal sensitive information from computers, such as passwords, credit card numbers, and social security numbers. Infostealers can be installed on computers through various means, such as clicking on malicious links, opening infected attachments, or downloading pirated software.

 

How do infostealer criminals operate?

Infostealer criminals sell the stolen information on underground forums to other criminals, who can use it to commit identity theft, fraud, and other crimes. Infostealer criminals can also use the stolen information to gain access to corporate networks and steal even more data.

 

How to protect yourself from infostealers?

There are several things you can do to protect yourself from infostealers, including:

  • Never store sensitive information, such as passwords, credit card numbers, or social security numbers, in your browser.
  • Use a strong password for your browser and enable two-factor authentication.
  • Install and keep updated an antivirus and anti-malware program.
  • Be careful about what you click on online. Do not click on links in suspicious emails or messages, and do not download files from untrusted sources.
  • Keep your software up to date. Software updates often include security patches that can protect you from infostealers.

Additional tips for protecting yourself from infostealers:

  • Use a browser that has all privacy protections turned on by default.
  • Be wary of any free application.
  • Do not open unexpected emails without validating with the sender first by phone or text.
  • Never install programs from suspicious emails.
  • Never send confidential information via email.
  • Do not access the Internet for personal use on the same device you use to connect to your organization’s systems and applications.
  • Always use Zero Trust or a VPN to access corporate applications.
  • Use MFA for accessing all your applications and sites.
  • Do not sync your phone’s browser with your computer’s browser.