In this episode, Spencer and Brad dive into the deep underworld of infostealer malware. They discuss what infostealers are, how they are used and what they are used for. They will dig into how the information obtained from infostealers can help cyber threat actors compromise large and small organizations, cloud providers and more but also how the infostealer data and logs can be used by authorities for good.

Resources

• 10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit
• https://x.com/vxunderground/status/1757467533202862344
• Infostealer malware logs used to identify child abuse website members
• https://cybernews.com/cybercrime/disney-slack-data-breach-unreleased-projects/
• https://x.com/arekfurt/status/1800181869256024083
• https://x.com/ddd1ms/status/1755256762997850279
• https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion?linkId=10091118

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/links

Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.