The use of malware designed to harvest consumers’ digital data – known as password stealers – has seen a significant rise in 2019.
According to Kaspersky’s data, the number of users, targeted by the stealers, peaked from less than 600,000 in the first half of 2018 to over 940,000 during the same period in 2019.
Password Stealing Ware (PSW) is a major weapon in the cybercriminals’ toolkit to sabotage users’ privacy. This malicious type of software grabs data directly from users’ web browsers using various methods. Quite often, this information is sensitive and includes access details for online accounts as well as financial information – like saved passwords, autofill data and saved payment card details.
In addition, some families of this type of malware are designed to steal browser cookies, user files from a specific location (for example, a user’s desktop) as well as app files, such as messenger services.
Over the past six months, Kaspersky has detected high levels of activity by the stealers in Europe and Asia. Most frequently, the malware has targeted users in Russia, India, Brazil, Germany and the USA.
One of the most widely spread Stealer Trojans was multifunctional Azorult, detected on the computers of more than 25% of all users who encountered Trojan-PSW type malware in the examined period.
“Modern consumers are increasingly active online and understandably rely on the internet to carry out many tasks in their daily lives. This fills their digital profiles with more and more data and details and makes them a lucrative target for criminals as they could be monetized in numerous ways afterwards. By securely storing passwords and credentials, consumers can use their favorite online services in confidence that their information will not be put at risk. This should be also supported by installation of security solution as one can never be too careful,” notes Alexander Eremin, security researcher at Kaspersky.
Kaspersky recommends that consumers follow this advice to ensure their passwords and other credentials remain secure:
- Do not share passwords or personal information with friends or family as they could unwittingly make them vulnerable to malware. Do not post them on forums or social media channels.
- Always install updates and product patches to ensure protection from the latest malware and threats.
- Start using reliable security solution like Kaspersky Password Manager that is designed to securely store passwords and personal information, including passports, driver's licenses and bank cards.
Read more about how cybercriminals use malware to steal passwords and other confidential information on Securelist.com
About Kaspersky
Kaspersky is a global cybersecurity company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 270,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.
