EN PT-BR
← Voltar ao feed
medium finance government technology consumer

Infostealers weekly report (26 Oct–2 Nov 2026): Gmail, Google, Facebook sessions dominate stealer logs; Generic Stealer and Warden Stealer lead

1 fonte(s) · 1 atualização(ões) · publicado 01/11/2026 21:00 · coletado há 2 horas

The InfoStealers weekly report for 2026-10-26 to 2026-11-02 summarizes credentials and sessions harvested by infostealer malware. Gmail is the most exposed email provider (843,312 users), and google.com (18,621 users), facebook.com (13,077) and instagram.com (10,452) lead the domains with active sessions. The United States ranks #3 by country of infection with 564 compromised machines. Corporate exposure includes banks, government domains and S&P companies such as salesforce.com (26 employees) and microsoft.com (25 employees).

Detalhes técnicos

  • Malware families: Generic Stealer (24,799 machines) and Warden Stealer (428 machines).
  • Antivirus on infected hosts: Windows Defender (13,418 machines), Malwarebytes (146), None detected (95), Avast/Norton (56).
  • Corporate domains with compromised employees: hostinger.com (221), rediff.com (183), icicibank.com (172), santander.com.br (68), buenosaires.gob.ar (67), secop.gov.co (65), mail.gov.in (35).
  • Other exposed services: discord.com (6,466), amazon.com (6,405), netflix.com (6,245), microsoftonline.com (5,320), paypal.com (4,071), openai.com (4,021), github.com (2,997).
  • Android apps in infected caches: Facebook, Instagram, Netflix, Snapchat, Spotify, Roblox, Discord.
  • The report does not state infection vectors or specific campaigns.

Remediação

The report gives no remediation guidance. Standard practice is to reset exposed credentials, revoke active sessions and enforce MFA.

Linha do tempo

  1. infostealers.com ↗ · pub. 01/11/2026 21:00 · coletado 02/11 08:01 primeiro registro

    Infostealers weekly report (26 Oct–2 Nov 2026): Gmail, Google, Facebook sessions dominate stealer logs; Generic Stealer and Warden Stealer lead

    ler a análise desta fonte

    The InfoStealers weekly report for 2026-10-26 to 2026-11-02 summarizes credentials and sessions harvested by infostealer malware. Gmail is the most exposed email provider (843,312 users), and google.com (18,621 users), facebook.com (13,077) and instagram.com (10,452) lead the domains with active sessions. The United States ranks #3 by country of infection with 564 compromised machines. Corporate exposure includes banks, government domains and S&P companies such as salesforce.com (26 employees) and microsoft.com (25 employees).

    Technical Details

    • Malware families: Generic Stealer (24,799 machines) and Warden Stealer (428 machines).
    • Antivirus on infected hosts: Windows Defender (13,418 machines), Malwarebytes (146), None detected (95), Avast/Norton (56).
    • Corporate domains with compromised employees: hostinger.com (221), rediff.com (183), icicibank.com (172), santander.com.br (68), buenosaires.gob.ar (67), secop.gov.co (65), mail.gov.in (35).
    • Other exposed services: discord.com (6,466), amazon.com (6,405), netflix.com (6,245), microsoftonline.com (5,320), paypal.com (4,071), openai.com (4,021), github.com (2,997).
    • Android apps in infected caches: Facebook, Instagram, Netflix, Snapchat, Spotify, Roblox, Discord.
    • The report does not state infection vectors or specific campaigns.

    Remediation

    The report gives no remediation guidance. Standard practice is to reset exposed credentials, revoke active sessions and enforce MFA.