Rising Threat from Infostealers: September 2026 Report

• •Infostealers are increasingly distributed via SEO poisoning and email impersonation.
• •Lzveil, DarkCloud, and AgentTesla are among the most active infostealers reported.
• •90.8% of malware samples are EXE files, with DLL side-loading techniques also used.

The September 2026 Infostealer Trend Report reveals a significant increase in infostealer malware, with major distribution methods including SEO poisoning and email impersonation. Notable infostealers like Lzveil, DarkCloud, and AgentTesla are targeting companies such as Microsoft and the Python Software Foundation. The report indicates that EXE files constitute approximately 90.8% of the malware samples, with DLL side-loading techniques accounting for 9.2%. Infostealers are designed to extract sensitive data, including passwords and session cookies, which can lead to further attacks like ransomware and account takeovers. The report emphasizes the importance of security measures such as two-factor authentication and updated security software. The data was compiled from AhnLab's detection logs and automated systems, highlighting the ongoing threat to both businesses and individual users.