Focus on infostealers, a growing threat

Theft of user accounts; With the world of tech changing at high speed between AI and a record increase in cyberattacks, that’s all we’re talking about anymore. An unknown threat just a few years ago, infostealers could well be the key trend of this year 2024 in the security landscape.

More than a month after the Mobile World Congress 2024 where these revelations took place, it is the phenomenon of infostealers which has emerged, highlighting a growing concern in the world of cybersecurity. Led by the expertise of Kaspersky and its Digital Footprint Intelligence team, these discussions revealed the complex nature and rapid evolution of this malware, posing the imperative need to adopt enhanced protection measures.

The rise of cyberthreats and their impact on digital life

Kaspersky sounds the alarm. With a worrying increase in security breaches, such as account takeovers and infostealer raids, millions of users globally are finding themselves in the crosshairs. Even popular platforms such as Roblox, Canva, OpenAI and Grammarly have not been spared, leaking sometimes very sensitive personal information. This is not an unfortunate stroke of luck, but rather a sign of a growing phenomenon: personal data has become the new holy grail for cybercriminals.

Thus, over the last three years, 34 million Roblox account identifiers (logins and passwords) have been compromised (+231%). Nearly 688,000 ChatGPT credentials were compromised between 2021 and 2023. Also listed among the victims, the company Canva with 1,160,000 account credentials stolen and auctioned on the Dark Web.

But the picture is even darker. Beyond the classic theft of identity or banking data, these threats are mutating into even more worrying territories such as data falsification, sabotage or espionage. This not only threatens our privacy but also undermines the security and stability of businesses and institutions. Cybersecurity is therefore no longer a solitary battle but a collective challenge.

THE infostealers : understand to better respond

Infostealers are a category of malware specially designed to stealthily infiltrate computer systems and steal personal and professional data. These digital threats operate in the background, often without users’ knowledge, collecting a wide range of sensitive information: login credentials, passwords, banking details, private correspondence, and much more. Their ability to hide and discreetly collect information makes infostealers one of the weapons of choice for cybercriminals seeking to monetize stolen data on the Dark Web.

The operation of infostealers is typically stealthy and sophisticated. They can be introduced into systems through various means, including infected email attachments, downloads from malicious websites, and file sharing networks. Once installed, they work to scan system files, registry entries, web browser databases, and other locations where personal information is often stored. This malware is also capable of recording keystrokes (keylogging), allowing it to capture information as the user enters it. After collecting the data, infostealers send it to a server controlled by the attackers, where it will then be sorted, sold or used for malicious purposes.

Practical tips for securing your data

We can never say it enough: in today’s world, where the virtual world is intertwined with our daily lives, securing our little digital secrets, professional or personal, is no longer an option but a necessity. Beyond the traditional warnings, they gave us some pearls of wisdom to protect our cybersecurity, whether you are alone in front of your screen or at the head of a small army of collaborators.

So where to start ? The basis: being aware. It is crucial to know what type of threats you may face. Imagine that questionable emails with strange attachments or links are a bit like candy from a stranger: it’s better to be wary of them. And for that, Kaspersky advises us to equip ourselves with a good goalkeeper for our emails, in order to automatically sort the wheat from the chaff.

Then there is the holy grail of security: the password. Not the “123456” or “azerty” kind, no. We’re talking about real, strong, unique passwords, the kind that gives these digital bandits a hard time. A password manager, it’s a bit like your secure set of keys and always within reach. And for belt and suspenders, we activate two-factor authentication (A2F). With this, even if someone guesses your password, they will still have a hurdle to overcome.

Nor should we neglect the updating our software. Hackers love flaws in old software, so we disappoint them by keeping everything up to date. Kaspersky tools can even take care of it for you, like a digital butler keeping an eye on things.

To close the loop, Kaspersky recommends a multi-layered approach to security. We talk aboutreliable antivirus, a robust firewall, a well-locked network and a short regular refresher course for everyone on online risks and good practices. And with monitoring tools, you can sleep soundly knowing that if something goes wrong, you’ll be the first to know.

By putting these tips into practice and equipping your digital arsenal with Kaspersky’s latest tools, you’ll be well-equipped to face threats from the big bad web and keep your valuable data under lock and key.

For your online protection, trust Kaspersky

Faced with the growing threat of infostealers, Kaspersky has taken the lead, revealing not only the scale of these threats, but also providing a comprehensive arsenal to confidently navigate this perilous digital environment. Cybersecurity, according to Kaspersky, goes beyond the simple acquisition of advanced technologies; it requires constant vigilance, proactive education and a commitment to safe online behavior.

To effectively counter infostealers and other cyber threats, the publisher offers Kaspersky Premium, a suite of integrated solutions. By regularly updating your systems and enforcing strong passwords, you are laying the foundations of a digital fortress. But Kaspersky goes further by offering specific modules for optimal protection: advanced malware detection, protection against phishing, securing online transactions and intelligent password management. Additionally, ongoing training on cybersecurity best practices, offered by Kaspersky, strengthens the ability of individuals and organizations to identify and neutralize threats before they cause harm.

Curious about strengthening your digital security and protecting yourself against infostealers? Visit the Kaspersky site to explore their full range of tools and services. Take advantage of promotional offers and free trials to discover how Kaspersky solutions can be customized to meet your specific security needs.