Threat actors' methods for accessing sensitive financial data are always evolving, with infostealers a prime example. Infostealers extract sensitive data from infected devices that are then sold and published as logs on the Dark Web for threat actors to utilize for a range of criminal activities. While infostealers are often categorized as a consumer vulnerability, attention is now shifting to enterprises – making it critical that credit unions are cognizant of and prepared to combat the threat.

Infostealers 101

Infostealers are a form of malware-as-a-service (MaaS) that, once installed, surreptitiously exfiltrate browser "autofill" field data, browser cookies, accounts/credentials from password managers, cryptocurrency wallets and many other forms of sensitive data. These sources provide hackers with access to data such as credit card information, bank account information, IP addresses, dates of birth, Social Security numbers and login credentials.