Malware Brief: How Infostealers Turn Stolen Identities Into Cybercrime Currency
Barracuda Networks, Wednesday, October 14th, 2026
Barracuda shows how infostealers like Lumma and Acreed harvest credentials, session cookies and tokens to hijack identities.
Barracuda's Malware Brief explains that modern infostealers target complete digital identities, including browser credentials, session cookies, authentication tokens and active sessions, not just passwords.
Stolen sessions can weaken MFA by letting attackers hijack already-authenticated accounts.
The brief notes Lumma Stealer's rebound after disruption and the emergence of low-cost tools such as Acreed, and urges organizations to protect identities and browser sessions alongside endpoints and data.