Infostealer

Glossary of TermsDarkRadar Wiki

The most comprehensive technical glossary for the Infostealer ecosystem. Expert-level definitions on credential leaks, stealer logs, and malware types, focused on noise-free intelligence.

Click on a letter below to filter terms starting with that letter:

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z

Definitions and Explanations

Cybersecurity terms and types hold an important place in the field of cybersecurity. These terms enable cybersecurity experts and researchers to communicate effectively.

Endpoint Detection and Response (EDR)

Endpoint Detection and Response (EDR) is a cybersecurity solution that continuously monitors end-user devices, such as laptops and servers, to detect and respond to advanced cyber threats like Infostealers that bypass traditional antivirus software.

Form Grabbing

Form Grabbing is a data theft technique where an Infostealer intercepts sensitive information—such as login credentials or payment details—directly from a web browser's memory before it is transmitted to the server. By capturing data before encryption (HTTPS) occurs, it bypasses network-level security measures.

Credential Stuffing

Credential Stuffing is a cyberattack where stolen account credentials (usernames and passwords), often obtained from data breaches or Infostealer logs, are used to gain unauthorized access to other unrelated online services through automated login attempts.

Dark Web Monitoring

Dark Web Monitoring is the proactive process of searching for and tracking compromised data, such as stolen credentials and Infostealer logs, within the unindexed parts of the internet where cybercriminals trade illicit information.

Fileless Malware

Fileless Malware is a type of malicious activity that uses legitimate programs to infect a computer. Unlike traditional Infostealers, it does not rely on files and leaves no footprint on the hard drive, operating exclusively within the computer's RAM (Random Access Memory).

Bot Logs (Stealer Logs)

Bot logs (also known as Stealer Logs) are comprehensive data packages harvested from an infected device by an Infostealer. These logs contain every piece of sensitive information stored on the machine, including credentials, cookies, and system metadata.

Exploit Kit

An Exploit Kit is a modular tool used by cybercriminals to automatically identify and exploit vulnerabilities in web browsers or plugins. Its primary purpose is to deliver a payload, most commonly an Infostealer, onto a victim's machine without any user interaction.

Antidetect Browsers

Anti-detect browsers are specialized software tools designed to alter, hide, or spoof a user's digital fingerprint. In the cybercrime ecosystem, they are used alongside data from Infostealers to bypass security filters by emulating a victim's legitimate device environment.

Command and Control (C2 / C&C) Server

A Command and Control (C2 / C&C) Server is a centralized infrastructure used by threat actors to send instructions to systems compromised by malware, such as Infostealers, and to receive the data exfiltrated from those infected devices.

Account Takeover (ATO)

Account Takeover (ATO) is a malicious act where an unauthorized individual gains access to a user's online accounts by using stolen credentials, session cookies, or personal data harvested by Infostealer malware. It is the final and most damaging stage of a credential theft operation.

Botnet Panel Rental (malware-as-a-service - maas)

Botnet panel rental is a service model where even individuals with minimal technical skills can access sophisticated Infostealer infrastructures for a recurring fee. In this model, attackers rent a user-friendly dashboard to manage infected devices and the data harvested from them, rather than writing the malware themselves.

Data Exfiltration

Data Exfiltration is the unauthorized transfer of sensitive information, such as passwords, documents, or financial records, from a target system to an external location controlled by an attacker, typically carried out by Infostealer malware.