Nearly 20 million information-stealing malware logs were sold on the dark web and in Telegram channels, and analysis of those logs showed that they had successfully penetrated considerable numbers of company environments.
Information-stealing malware targets apps such web browsers, email clients, instant messengers, cryptocurrency wallets, FTP clients, and gaming services to steal data that is stored inside. The stolen data is organized into “logs,” or archived archives, and either sold on black market websites or uploaded back to the threat actor for use in assaults.