SECURITY researchers have reported a significant increase in the prevalence of infostealer malware, with 7.4 million devices infected in the first half of 2026, leading to the harvesting of 1.7 billion credentials. Notable variants include Vidar, StealC, and Lumma. The report from Flashpoint indicates that the infostealer ecosystem has become automated, processing credentials with minimal human oversight, resulting in rapid credential stuffing attacks.
Furthermore, the report highlights a rise in software vulnerabilities, with 21,667 disclosures tracked, an 8% increase from the previous period. Malicious AI activity is also surging in underground markets, showing over 22 million posts related to AI threats, while ransomware attacks have increased dramatically.