These "infostealers" are widespread, with billions of records compromised, enabling cybercriminals to launch credential stuffing attacks, particularly targeting users who reuse passwords.