Increasing Infostealers: The most recent concern for organizational defense

Infostealers quickly become one of the most dangerous tools in a hacker arsenal, especially in environments where e-mail It remains a primary communication channel for enterprises. In their center, infostealers are a type of trojan designed by malware Authors for collecting sensitive data, such as authentication data, financial information, system details and personal identification information.

These malicious files are designed to extract as much information as possible, functioning quickly and angrily. Once collected, the stolen data are sent on command and control servers, where they can be exploited for different malicious purposes.

Prashant Kumar

X-Labs security researcher at Forcepoint.

Infostealers in the wild

Some research suggests that infossealers hit up to 10,000 victims a day; However, Forcepoint research teams have recently observed an increased activity from various infossealers, targeting victims in several ways.

The first is vipkeylogger, circulating through phishing campaigns as an attachment that takes the shape of an archive or Microsoft Office files. This exfiltrates data using instant or dynamic messenger telegrams services DNS Services. The opening of the attachment leads to a sequence of events that eventually ends in a series of data exfiltration, such as recording key pressing, collecting information such as clipboard data, screenshots, browser history and more.

Strela Stealer is also circulated through phishing campaigns containing attachments that continue to be regular scripts, and when executing the script, performs malicious activities and harvested sensitive information, including usernames, passwords and other details of AE -Email Configuration. , sending it to the command and control servers.

Finally, Rhadamanthys Stealer was conveyed in the holiday season and mascarales as -bodies in the travel industry with malicious document attachments. By clicking the documents, it triggers a chain of downloads and scripts to steal the user’s accreditation data and cryptocurrency wallet data. This campaign resembles the attacks of the previous agent Tesla, but uses new obuscing techniques.

Needless to say, the infosters are predominated and appear in a series of different formats, which makes them harder for them to defend themselves, which ask the question – how can you protect yourself against increasingly sophisticated infossealers?

Protection against infossealers

If it was not already clear, the growth of infosters emphasizes the need for a sophisticated and holistic approach to defend your organization. To work the most efficiently, this approach must combine essential security measures, such as multi-factors authentication, with a proactive mentality. Cybercriminals continuously evolve their tactics, so organizations must be to remain before.

Enterprises must make common practices to minimize vulnerabilities by encrypting rest and moving data to ensure that only authorized persons have access to sensitive data. Prevention of data loss (DLP) E -mail solutions can help businesses to get control over entry and output threats by supporting the virus and malware block, spam filtering, content filtering and archiving through Email. And, of course, by regularly updating and hosting security audits, organizations can better understand if their security measures are effective and where they are missing.

However, probably one of the most important parts of the defense of an organization is its people. Employees must be aware of their role in organizational security. This includes basic elements, such as maintaining strong passwords and using technologies such as MFA, but should also include their ability to constantly be Cyberaware. This means that organizations have a role to play in assuring employees to know how to identify and act when they face an attack, otherwise they have the potential to reduce without knowing the entire kingdom inside. The human error can be the weakest connection in the security chain, so it is important to educate the staff.

Infostealers are an increasing and insidious threat in today’s digital era, teaching unprotected organizations and people who do not know. Combining strong technical defenses with a culture of security awareness, enterprises can significantly reduce the risk of becoming a victim of these Cyberattacks. When all is said and done, proactive prevention and informed employees are the final defense line.

We compiled a list of the best business password managers.

This article was produced as part of the TechradarPro expert channel, where we present the best and brightest minds in the technology industry. The opinions expressed here are those of the author and are not necessarily those of TechradarPro or PLC Future. If you are interested in contributing, find out more here: