An infostealer needs only a short window on an endpoint. It searches browsers and local folders for saved passwords, session cookies and cloud keys, packages what it finds and sends it out. Removing the malware afterwards doesn’t reach any of that. Mandiant found at least 79.7 percent of the accounts used in the 2024 Snowflake attacks had credentials exposed beforehand, the earliest traced to November 2020.
The research publishes alongside an update adding more than 46 million newly compromised passwords. You can view it here: Inside Infostealer Attacks
Related
This entry was posted on September 15, 2026 at 9:46 am and is filed under Commentary with tags Specops. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Inside Infostealer Attacks By Specops
An infostealer needs only a short window on an endpoint. It searches browsers and local folders for saved passwords, session cookies and cloud keys, packages what it finds and sends it out. Removing the malware afterwards doesn’t reach any of that. Mandiant found at least 79.7 percent of the accounts used in the 2024 Snowflake attacks had credentials exposed beforehand, the earliest traced to November 2020.
The research publishes alongside an update adding more than 46 million newly compromised passwords. You can view it here: Inside Infostealer Attacks
Share this:
Like this:
Related
This entry was posted on September 15, 2026 at 9:46 am and is filed under Commentary with tags Specops. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.