Infostealers bypass MFA by stealing cookies in phishing attacks

The article discusses the evolving threats posed by infostealers in phishing schemes. Cybercriminals increasingly favor infostealers over traditional phishing methods, as these malware programs silently collect sensitive data from infected devices without requiring victims to input information on fake sites. This method allows for a less visible attack process and takes advantage of the widespread use of multi-factor authentication by bypassing it through stolen session cookies.

The malware's ease of deployment, thanks to a growing malware-as-a-service (MaaS) ecosystem, has lowered entry barriers for attackers. Infostealers can generate multiple revenue streams by selling stolen data to other criminals. To protect against such threats, users are advised to remain skeptical of ads, avoid suspicious downloads, and verify email links before clicking.