Infostealers Harvest 1.7 Billion Credentials in Six Months

Flashpoint’s 2026 Midyear Threat Intelligence report documents a sharp rise in automated infostealer activity (7.4M infected devices; 1.7B credentials harvested), ongoing vulnerability proliferation with hundreds of actively exploited flaws, a surge in underground malicious AI usage (22M related posts), and increased ransomware victims (6,256) driven by automation and RaaS—painting a large-scale, commoditized cybercrime ecosystem.