Infostealer malware. What it takes, and what to do next.
Infostealers copy saved passwords, browser cookies, and other secrets from an infected computer and send them to criminals. The stolen data is packaged as stealer logs and circulated online. These guides explain the most common families and how security teams should respond.
Lumma Stealer
Lumma Stealer (LummaC2) is an infostealer that takes passwords, session cookies and crypto wallets. How it spreads, its 2025 takedown, and how to respond.
Read the guide MALWARE-AS-A-SERVICE · SINCE 2020RedLine Stealer
RedLine Stealer steals saved passwords, cookies and crypto wallets. Learn how it spreads, what Operation Magnus did in 2024, and how to respond to an infection.
Read the guide MALWARE-AS-A-SERVICE · SINCE 2018Vidar Stealer
Vidar is a long-running infostealer that takes browser passwords, cookies, cloud keys and crypto wallets. How it spreads, Vidar 2.0, and how to respond.
Read the guide MALWARE-AS-A-SERVICE · SINCE January 2023StealC
StealC is an infostealer sold since 2023 that takes passwords, cookies and crypto wallets. How it spreads, its June 2026 takedown, and how to respond.
Read the guide MALWARE-AS-A-SERVICE · SINCE 2019Raccoon Stealer
Raccoon Stealer is an infostealer sold since 2019 that takes browser passwords, cookies and crypto wallets. Its history, 2022 takedown, and how to respond.
Read the guideFrom malware to monitoring.
Find stolen work
credentials first.
Vuxep indexes credentials from stealer logs and alerts your team when accounts on your verified domains appear.