Infostealer

Malware built to harvest stored passwords, browser cookies, cryptocurrency wallets and similar data from an infected computer and send it to the attacker. It often spreads through phishing, fake CAPTCHA pages or trojanized copies of popular software. Stolen session cookies can bypass MFA, so cleaning the machine is not enough: revoke the user's sessions and reset every credential that was stored on it.

Further reading: www.cisa.gov

All terms