Step by step
The narration of the video as text. Select a time to play the video from that step.
An infostealer is malware that copies saved passwords, session cookies and browser data from an infected computer and sells them. AlienGate shows you which device it was and what was taken.
In Dark Web Intelligence, open the Stealer Logs tab. Each row is a record captured from an infected device.
Switch to By device. Records are grouped per computer, with its IP address, operating system, the program the stealer ran from, the people affected and the critical count.
Start with the device that has critical records. Click AI remediation steps to get a checklist written for this device.
First, isolate the device so the malware cannot send more data. Then remove the infostealer with a full endpoint scan, or reimage the machine if you are not sure it is clean.
Treat every password used on that device as stolen and reset them all. Then sign the user out everywhere: stolen session cookies work even without the password and can bypass multi-factor authentication.
Finally, find how the device got infected, usually a fake download or an email attachment, and block that source.
Use Show leaks to see every record from that device, and mark each one remediated when the work is done. Any new record from the same device will appear again in Live Breaches.
