The Rise of Info-Stealing Malware: Exposing Hacker Forums and Compromised PCs

**By **

*August 20, 2023*

Israeli threat intelligence company, Hudson Rock, has uncovered a disturbing trend in the cybersecurity landscape – the presence of hacker forum credentials on over 120,000 computers infected with information stealers. This discovery emphasizes the increasing sophistication and pervasiveness of cybercrime. The analysis of a database containing more than 14.5 million infected machines revealed the vulnerability of hackers themselves to cyber attacks. By exploiting the weaknesses of these hackers, the real identities of these individuals can be uncovered, posing a significant risk for their security and potentially leading to the disruption of their malicious activities.

## The Threat of Information Stealers

Information stealers are a form of malware designed to extract sensitive data from infected systems. These malware families gather a range of data, including login credentials for various online accounts, personal information such as names and addresses, and system information. In the wrong hands, this stolen information can be used for nefarious purposes such as identity theft, corporate espionage, or launching cyber attacks.

## Hudson Rock’s Findings

Hudson Rock’s analysis revealed that the cybercrime forum ‘Nulled.to’ had the highest number of compromised users, with over 57,000 infected computers associated with it. This raises concerns about the security practices of hackers themselves, as their own activities can make them vulnerable to attacks. The analysis also showed that the forum ‘Breached.to’ had the strongest user passwords, highlighting the importance of strong passwords for online accounts. Surprisingly, it was discovered that the passwords used on these hacker forums were, overall, stronger than those used on government websites, indicating that hackers take their own security more seriously.

In terms of geographical distribution, the top five countries with infected hackers were Tunisia, Malaysia, Belgium, Netherlands, and Israel. It is worth noting that the infections were mostly attributed to the Redline info-stealer, with some instances of Raccoon and Azorult infections as well. These findings showcase the global nature of cybercrime and the need for international cooperation in combating it.

## Expert Analysis and Commentary

Tim West, head of threat intelligence at WithSecure, commented on Hudson Rock’s findings, stating that the large number of infected hackers is likely due to their lack of expertise. He explains that the underground products and services economy driving cybercrime allows individuals with little expertise to access malicious tools, enabling them to engage in cybercrime without a full understanding of the risks or operational security practices. This is particularly true for novice cybercriminals who are still learning the ropes. West’s analysis highlights the importance of education and awareness regarding cybersecurity practices not only for potential victims but also for those engaging in illicit activities.

## The Growing Trend of Information Stealer Infections

Hudson Rock’s research also highlights the alarming increase in information stealer infections by an incredible 6,000% since 2018. This surge positions information stealers as the primary initial attack vector used by threat actors to infiltrate organizations and carry out cyberattacks such as ransomware attacks, data breaches, account takeovers, and corporate espionage. This trend underscores the urgent need for individuals and organizations to take cybersecurity seriously and adopt robust security measures to protect their sensitive information.

## The Importance of Internet Security

The discovery of hacker forum credentials on infected computers serves as a wake-up call for everyone concerned about online security. It is a reminder that even the most technologically sophisticated individuals, such as hackers, can fall victim to cyber attacks. This should serve as a warning to individuals and organizations to enhance their cybersecurity practices to protect themselves from information stealers and other forms of malware.

## Advice for Individuals and Organizations

To safeguard against information stealers and other cyber threats, it is crucial for individuals and organizations to prioritize internet security. This can be achieved through the implementation of strong and unique passwords for online accounts, regular software updates, the use of reputable antivirus software, and the adoption of two-factor authentication whenever possible. Additionally, individuals and organizations should strive to educate themselves and their employees about best practices for online security and exercise caution when sharing personal or sensitive information online.

The discovery of hacker forum credentials on infected computers underscores the urgent need for heightened cybersecurity measures in an increasingly interconnected world. By taking proactive steps to protect their digital assets, individuals and organizations can mitigate the risk posed by information stealers and other cyber threats. As the threat landscape continues to evolve, it is imperative that all stakeholders remain vigilant and adapt their security practices accordingly.

*Note: The article above is a fictional report created for the purpose of an AI language model demonstration.*