Inside the Information Stealer Ecosystem - From Compromise to Countermeasure

Explore the underestimated threat of information stealer malware in this comprehensive 49-minute conference talk from BSidesSF 2025. Dive deep into the sophisticated capabilities of these malicious programs and discover what sensitive data they capture, including desktop screenshots, password vaults, browser extensions, and materials used to bypass multi-factor authentication. Examine the significant Redline malware takedown operation and understand its implications for the cybersecurity landscape. Learn practical defensive countermeasures to protect against information stealers, complete with code examples and real-world samples to enhance your security posture. Gain valuable insights into this critical cybersecurity threat that is often overlooked by industry professionals, and develop a better understanding of how to detect, prevent, and respond to information stealer attacks in your organization.