Rise in Infostealer Attacks Targeting Enterprise SSO Credentials

Rise in Infostealer Attacks Targeting Enterprise SSO Credentials

First seen 5 Feb 2026, 04:07 UTC •Securitybrief.AuSecuritybriefBleepingcomputerCybersecuritynewsPandasecurity+63 •82% similarity •37.1

Article Content

Browse articles
ThreatCluster

Infostealer malware is increasingly exposing enterprise identity credentials, with 16% of infections involving Single Sign-On or identity provider details, according to Flare's analysis of 18.7 million logs from 2025. A total of 2.05 million logs from January to November 2025 revealed compromised enterprise identity credentials.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

WannaCry Raccoon Stealer RedLine Storm Storm Infostealer Operation HumanitarianBait Binance Change Healthcare Coinbase Equifax Meta MGM Resorts AWS IAM Identity Centre Microsoft Edge Microsoft Entra ID Mozilla Firefox Telegram Waterfox