Infostealers and the Access Economy

• Steal browser passwords, session cookies, crypto wallets, autofill data.
• Stolen data sold on marketplaces; buyers use it for account takeover and initial access.
• Named examples: RedLine, Lumma Stealer (disrupted 2025), Vidar, Raccoon.
• Commonly delivered via fake installers, cracked software, and malvertising.
• Analysis focus: string decryption, HTTP exfiltration, targeted file paths and registry keys.