Malware Finances and Operations: a Data-Driven Study of the Value Chain for Infections and Compromised Access. (arXiv:2306.15726v1 [cs.CR])

We investigate the criminal market dynamics of infostealer malware and
publish three evidence datasets on malware infections and trade. We justify the
value chain between illicit enterprises using the datasets, compare the prices
and added value, and use the value chain to identify the most effective
countermeasures.

We begin by examining infostealer malware victim logs shared by actors on
hacking forums, and extract victim information and mask sensitive data to
protect privacy. We find access to these same victims for …

access compromised criminal data data-driven datasets enterprises finances infections infostealer malware market operations study trade value