The Surge of Infostealers

Explore the surge of infostealers, their growing role as gateways to ransomware, and the commercialization of cyber threats.

Cyber Threat Intelligence (CTI) is critical for organizations to have proactive security, but security teams should know how to build unique threat intelligence that fits perfectly to their specific needs and challenges

In this chapter, we’ll delve into the escalating threat of infostealers and the broader implications they carry. Infostealers are not your typical data thieves; they’ve evolved into gateways for more malicious actions, including ransomware and data exfiltration. This chapter will shed light on the vital role of tackling this growing menace and understanding its implications for cybersecurity.

Infostealers: Beyond Data Theft

Infostealers are not merely after data; they represent a perilous path to more devastating attacks. The statistics underline the urgency of addressing this issue. 

We’ve observed a staggering 200% increase in human-operated ransomware attacks since September 2022, making the connection between infostealers and ransomware all the more critical.

Commercialization of Infostealers

What adds to the concern is the commercialization of these threats. Infostealers have entered the market as “Malware as a Service,” making them easily accessible to individuals lacking technical expertise. Underground markets, especially in regions like Russia with forums such as Genesis, have become hubs for trading stolen credentials. 

This commercial approach has given rise to new threat actors. Groups like Karakurt, Strawberry, Tempest, and Octopus have emerged, leveraging the booming infostealer market to pose significant threats to global digital security.

Infostealers as Gateways and Catalysts

Infostealers are not isolated threats; they serve as gateways to marketable commodities and catalysts for emerging cyber threats. Understanding their role in this ecosystem is vital for the cybersecurity community.


In the next sections, we will explore real-world examples of infostealers and the threats they enable, along with strategies and solutions for countering this evolving landscape of cyber threats.

Building reliable threat intelligence against infostealer threats

Chapter 3: 
RedLine Malware – A Closer Look

Table of Contents

See VMRay in action.
Build reliable and relevant threat intelligence against the evolving malware and phishing threats.

Further resources


Build the most reliable and actionable Threat Intelligence.


Watch our webinar from at SANS Cyber Seolutions Fest 2023


Cultivate Intelligence on Targeted and Previously Unseen Threats

Welcome to the playground.

Explore what you can do with VMRay.

Click on the yellow dots to check the report formats, see the overview, explore the network connections of the sample, malicious behavior, and relevant files, map the threat on MITRE ATT&CK Framework, analyze and download IOCs and artifacts.

The analysis report tabs are available both for VMRayDeepResponse and VMRayTotalInsight. The bundle of VMRay FinalVerdict and VMRayDeepResponse also offers access to the analysis report tabs.

We’re sorry. 

The interactive tour is not available on mobile devices.

Unveiling the power:
See our experts showcasing VMRay’s capabilities.

Analysis of a malicious file

Join Fatih Akar from the VMRay team as he provides a detailed walkthrough of a malicious LNK file, a prevalent attack vector since Microsoft’s Office macros block.

Gain valuable insights into each tab of our comprehensive analysis report and get a sneak peek into what you’ll be exploring.

Analysis of a malicious URL

Join Andrey Voitenko, an expert in advanced malware and phishing analysis from the VMRay team, as he demonstrates how to submit emails and URLs to the VMRay platform using built-in connectors.

Discover the capabilities of our new Automation Dashboard, enabling one-click automation with your existing EDR, SOAR, SIEM, and TIP tools. Monitor analysis data seamlessly from your VMRay dashboard and unlock new levels of efficiency in your security operations.

Integrating with existing tools

Watch Michael Bourton showcasing the seamless integration of VMRay platform with your existing security stacks.

Discover how effortlessly you can leverage unparalleled detection and analysis capabilities by utilizing dedicated connectors or our Rest API.

Experience VMRay in Action:
Explore Real-world Malware Analysis Reports

Get a firsthand look at the power and capabilities of the VMRay platform by delving into our sample malware and phishing analysis reports.

Immerse yourself in a range of report formats, providing comprehensive insights.

Dive into the overview, explore intricate network connections, analyze malicious behavior in detail, and map threats using the MITRE ATT&CK Framework. See the possibilities to download clear IOCs.

Uncover the capabilities that await you.

Calculate how much malware false positives are costing your organization:
Malware False Positive Cost Calculator