Infostealer Malware

Hand holding iPhone showing iOS exploit by infostealer

Infostealer Using New “DarkSword” iOS Exploit Chain Deployed by Russian Threat Actors

March 23, 2026

DarkSword packs both a complete iOS exploit chain and infostealer into one package. The chain initiates when Safari opens a malicious webpage with a hidden iframe that springs the malware from the WebContent sandbox. It then works its way into deploying a number of custom payloads designed to tap into various vital and privileged iOS services.

Police car on the street showing international law enforcement action on infostealer malware

Cyber Security News

Raid on Lumma Infostealer Malware Results in Seizure of Control Panel, 2,300 Domains

May 26, 2025

A major threat actor has been crippled by an international law enforcement action, as the Lumma infostealer malware operation saw its control panel seized along with infrastructure dwelling in Europe and Japan. This was supplemented by Microsoft seizing some 2,300 domains belonging to the group, which has infected over 394,000 Windows computers globally.

Cyber Security News

Have I Been Pwned? Adds Over 200 Million Stolen Passwords Harvested via Infostealer Malware

March 7, 2025

Have I Been Pwned? (HIPB) has added 244 million freshly stolen passwords compromised via infostealer malware to an already existing list of 199 million, impacting 284 million unique user accounts.

Microchips showing infostealer malware in US military and defense contractors

Cyber Security News

Hudson Rock: Infostealer Malware Not Infrequently Found in Systems of the US Military and Defense Contractors

February 20, 2025

A new report from cybersecurity firm Hudson Rock finds that infostealer malware is present on "thousands" of systems belonging to the US military and major defense contractors such as Boeing and Lockheed Martin.

Close-up of hands typing on a computer keyboard showing Russian hackers using infostealer malware

Cyber Security News

Russian Hackers Steal 50 Million Passwords From 111 Countries Using Infostealer Malware

December 1, 2022

Russian hackers stole 50 million passwords from popular online services such as PayPal, Amazon, Roblox, Steam and crypto wallets by deploying infostealer malware on users’ devices.

Infostealer Malware

Infostealer Using New “DarkSword” iOS Exploit Chain Deployed by Russian Threat Actors

Raid on Lumma Infostealer Malware Results in Seizure of Control Panel, 2,300 Domains

Have I Been Pwned? Adds Over 200 Million Stolen Passwords Harvested via Infostealer Malware

Hudson Rock: Infostealer Malware Not Infrequently Found in Systems of the US Military and Defense Contractors

Russian Hackers Steal 50 Million Passwords From 111 Countries Using Infostealer Malware

Why Purple Teaming Is Becoming the Operating Model for Cyber Defense

CISA and NSA Release “Best Practices” Guidance for Coordinated Vulnerability Disclosure Programs

State-Sponsored Russian Hackers Exploit Vulnerable Routers to Compromise Critical Infrastructure

New White House AI Platform to Foster Public-Private Coordination on Security Vulnerabilities