A Data-Driven Analysis of Infostealer Malware Victims
Researchers analyze 170,298 infostealer victims and release an anonymized dataset under controlled access.
A cs.CR paper describes a privacy-preserving pipeline that turns illicit infostealer logs into a research dataset of 170,298 victims across multiple families. The most compromised services mirror popular platforms, with gaming and entertainment overrepresented, and the sample includes credentials for law-enforcement, government and military services, all eight Ivy League universities, and security, financial, remote-access, and development platforms. Victims show widespread credential reuse, revictimization risk, and overlap with phishing and ransomware victim populations. The authors release the first anonymized victim-level dataset under controlled access.
- Privacy-preserving pipeline built a dataset of 170,298 infostealer victims
- Compromised services track popular platforms, with gaming and entertainment overrepresented
- Sample includes law-enforcement, government, military, and all eight Ivy League domains
- Victims show credential reuse and overlap with phishing and ransomware populations
- Anonymized victim-level dataset is released under controlled access
From the original article
1 min read at arxiv.orgInfostealer malware infects devices worldwide and harvests their most sensitive contents: credentials, browser sessions, private keys, and access certificates. Yet its impact on victims remains difficult to study without an ethical, legal, and curated research dataset.
By Arttu Paju · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.