Infostealers account for surge in identity-enabled attacks

Analysis of almost 93,000 threats detected within more than 308 petabytes of security telemetry by Red Canary shows infostealer malware infections on the rise across both Windows and macOS platforms. Used to gather identity information and other data at scale, in 2024 LummaC2 was the most prevalent stealer detected in 2024, operating under a malware-as-a-service model, and selling for anywhere from $250 per month to a one-time payment of $20,000. Adversaries commonly use LummaC2 to deliver NetSupport Manager, Red Canary's seventh most detected threat detected in 2024 -- giving them a gateway to deploy other malicious payloads as a follow-up… [Continue Reading]