Infostealer Malware Fuels Corporate Breaches From Personal Devices

The report analyzes infostealer campaigns across 10,198 compromised systems and shows that personal-device infections are a significant vector for enterprise breaches: 43% originate from gaming downloads, 24% from productivity tools, and other everyday software is increasingly abused. Notably, one in four infected users possessed active corporate credentials (VPN, SaaS, cloud), developers with elevated privileges and unvetted packages are especially at risk, and business-software-linked infections often yield direct corporate access; recommended mitigations include application allowlisting, restricting admin rights, and monitoring stealer logs.