Wiz Research analyzes how infostealer malware breaches cloud, code, and AI environments
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
AI summary
Wiz Research, in collaboration with NordStellar, analyzed credential leaks on infected devices and found that three infostealer malware families—Lumma C2, RedLine, and Vidar—accounted for 85.7% of all detected incidents. Among stolen credentials, AWS and GCP accounted for 46% and 13% respectively, GitHub-related App Tokens, OAuth tokens, and PATs accounted for about 10%, and AI platforms accounted for 5%, primarily composed of OpenAI API keys.