Infostealers Turn Millions of Devices Into Credential Theft Machines
Summary
Flashpoint reports more than 11.1 million devices infected with infostealers in 2025 and over 3.3 billion credentials and other identity data circulating in illicit markets. Vidar led infections in early 2026, the article says.
Key points
- Flashpoint reports more than 11.1 million devices infected with infostealers in 2025 and over 3.3 billion credentials and other identity data circulating in illicit markets.
- The article says more than 30 infostealer strains have been identified, with malware-as-a-service offerings available for as little as $60 per month.
- Flashpoint's reported leading strains in 2025 were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.
- In the first two months of 2026, Vidar reportedly accounted for more than 73% of infected hosts and devices, while Lumma accounted for 1.1%.
- Infostealers can collect passwords, enterprise and cloud credentials, cookies, session tokens, wallet information, payment data, and system metadata.
- Stolen data may be packaged into logs and sent to attacker-controlled servers, then sold or used to gain access and deploy ransomware.
Article Details
- Event Type
- Reported growth in infostealer infections and credential theft.
- Impact
- Flashpoint reports that more than 11.1 million devices were infected in 2025 and more than 3.3 billion credentials and other identity artifacts were circulating in illicit marketplaces. Stolen credentials can enable attackers to access accounts and networks, and may be used to deliver ransomware. The article reports that Vidar accounted for more than 73% of infected hosts and devices during the first two months of 2026, while Lumma accounted for 1.1%.
Malware
AcreedDuring 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.LummaDuring 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.RhadamanthysDuring 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.StealCDuring 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.VidarDuring 2025, the most successful stealers, in order, were Lumma, Acreed, Rhadamanthys, Vidar, and StealC.