What it is
Information stealers, or "infostealers", are malware designed to quietly collect valuable data from an infected device: saved passwords, browser session cookies, mobile-money and card details, and sometimes cryptocurrency wallets. The stolen data is sent to criminals who use it to take over accounts — often without needing your password, because stolen session cookies can bypass sign-in.
How it spreads
Cracked or "free" versions of paid software, games or activation tools.
Fake download pages, malicious email attachments and links, and fake app updates.
Malicious browser extensions and files shared through messaging apps.
How to protect yourself
Install software only from official sources, and never from cracked-software sites. Keep your device and browser updated, run reputable security software, and be wary of unexpected downloads. Use multi-factor authentication so a stolen password alone is not enough, and avoid storing card or mobile-money details in the browser. Our guide on avoiding malware has more.
If your device may be infected
Disconnect the device and, from a different, trusted device, change the passwords for your important accounts — email first — and sign out all sessions to invalidate stolen cookies.
Run a full scan with reputable security software, or reset the device if you cannot be sure it is clean.
Watch for unauthorised mobile-money and bank activity, and report through our reporting guidance.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.