CYBERSECURITYTRACKER
Permanent story citation

Amatera: How the prolific infostealer works and spreads

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11851

As cited

Copy frozen at (site build).

threat intel

Amatera: How the prolific infostealer works and spreads

Amatera was the leading infostealer in ESET's Latin American detections during the first half of 2026, reflecting professionalization in the cybercrime ecosystem. The malware demonstrates how modern credential-stealing threats have evolved into organized operations with sophisticated distribution and functionality.

Why it matters: Organizations in Latin America and globally face heightened infostealer risk as criminal groups mature their tactics; practitioners should assess detection capabilities for Amatera and similar families that prioritize credential theft at scale.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary