OTX Threat: September 2026 Infostealer Trend Report

During September 2026, infostealers were primarily distributed through SEO poisoning, disguised as illegal software such as cracks and keygens. Major distribution platforms included Mediafire, AWS S3, Mega, and Cloudflare Storage. EXE files comprised 90.8% of samples, while DLL side-loading accounted for 9.2%, utilizing legitimate files like python37.dll and POWRPROF.dll. A new infostealer named L