Hackers Use Stealer Logs to Bypass MFA and Launch Ransomware Attacks

Infostealer malware is quietly harvesting browser-saved credentials, session cookies, and other sensitive data, which are aggregated into searchable stealer-log markets and resold to initial access brokers and ransomware affiliates; stolen session cookies are highlighted as a primary method for bypassing MFA and enabling direct access to corporate networks, with large-scale circulation (e.g., 124 million unique passwords) and distribution via channels like Telegram.