Cyble Research Labs – Analysis Report of Stealer Malware Family

Cyble Research Labs reports extensive use of stealer (info-stealer) malware by initial access brokers who distribute these families via phishing to harvest credentials, cookies, system data and screenshots; stolen data is aggregated and sold to other criminal groups for espionage, data theft, or ransomware. The analysis covers 50+ stealer variants and lists the top 10 observed families (e.g., RedLine, Bloody, Raccoon, Loki, Vidar), highlighting an active, large-scale criminal ecosystem around credential theft.