Why is the infostealer risk so difficult to manage?

Managing the infostealer risk is challenging not only because of the versatility and stealthy nature of this malware but also due to where the risk primarily occurs: on unmanaged devices that have access to internal environments, such as employees’ personal laptops or suppliers’ computers.

This issue has two main causes. First, technical measures on these devices are lacking. Consumer antivirus solutions are often ineffective against the advanced tactics of infostealers. Second, user behaviour plays a major role in causing infostealer infections.

Let’s first examine the technical measures. Corporate antivirus solutions are generally better equipped to detect infostealers. This is because these systems offer broader monitoring of software behaviour and continuously scan for it. On the other hand, consumer antivirus programs often rely on recognising known code structures of malicious software. Infostealer creators exploit this by constantly releasing new versions of the malware, leaving consumer solutions struggling to keep up.

The issue of user behaviour is even harder to solve. Most infections start with unsafe downloading practices, such as installing unverified software or opening suspicious email attachments. This is especially common on personal devices, where users tend to be less cautious. Many employees are unaware of the risks their online behaviour at home poses to their employer.

Completely excluding access from unmanaged devices is a challenge for modern organisations. In today’s hybrid work environments, many employees work remotely and rely on personal devices to access company information. This creates a complex security landscape, as IT teams struggle to effectively monitor and control these unmanaged devices. 

This disconnect leaves organisations responsible for security but without control over the devices accessing sensitive data. As a result, the infostealer risk, already dangerous due to its advanced and stealthy nature, becomes even harder to manage. Fortunately, there are steps that can be taken to mitigate this risk.