Infostealers Surge as Cybercriminals Shift Tactics Away from Data Breaches A growing threat is quietly eclipsing traditional data breaches as cybercriminals pivot to more efficient methods of stealing sensitive information. Research from NordVPN and NordStellar reveals that while compromised databases declined by 36% between 2024 and 2025 dropping from 4,804 to 3,069 infostealer malware logs surged by 35%, rising from 19.5 million to over 26 million in the same period. Unlike high-profile breaches, infostealers operate stealthily, extracting saved passwords, browser cookies, autofill data, and session tokens directly from victims’ devices. Mantas Sabeckis, senior threat intelligence researcher at Nord Security, notes that while breaches may be decreasing, the shift to infostealers represents a more insidious risk: "A single infection can silently harvest everything, often without the victim ever knowing." The trend aligns with findings from Cloudflare’s 2026 Threat Report, which highlights a broader shift in attacker behavior. Cybercriminals are prioritizing efficiency over sophistication, favoring stolen credentials over costly exploits. In 2025, infostealers harvested 624 million passwords 18 times more than the 34 million exposed in breaches. For email addresses, breaches leaked 542 million, while infostealers captured 380 million, with the gap narrowing rapidly. Marijus Briedis, CTO at NordVPN, underscores the danger: "Breaches trigger alerts and remediation, but infostealers operate in silence. Victims often only discover the theft when their accounts are already compromised." The malware typically spreads through pirated software, fake downloads, and phishing emails, running undetected in the background. While basic security measures such as password managers, software updates, and anti-malware tools can mitigate risks, awareness remains a critical gap. As Briedis points out, "Most people understand data breaches, but few recognize infostealers a threat that bypasses corporate defenses entirely."