Infostealers In Banking Fraud: How Stolen Credentials Lead To Silent Intrusions
Infostealer malware quietly copies saved passwords, session cookies and other login data from victims' devices, and those stolen "logs" are then sold on criminal marketplaces. Attackers use them to take over bank accounts, onboard mule accounts and break into corporate systems, often weeks before any fraudulent transaction appears. Banks and fraud teams are affected because the stolen credentials bypass multi-factor authentication through reused session cookies, and the threat usually sits in a gap between cyber and fraud teams. The article argues that organisations should watch the payment trail as well as the network to spot and disrupt these campaigns earlier.
Continue on group-ib.com ↗ ‹ All news Get the newsletter
The summary and image come from Pro CISO; the image is shown from their website.