Hackers Don’t Hack, They Log In

No ratings

Presented at GrrCON 2025 by

Cyber threat actors are evolving their tactics, moving away from traditional methods to more sophisticated approaches. Instead of exploiting vulnerabilities or brute-forcing passwords, they now heavily rely on stolen credentials to breach systems efficiently. A key facilitator of these breaches is the emergence of stealer logs. These logs contain a range of pilfered data, including usernames, passwords, cookies, and session tokens gathered through info stealer malware. Backed by statistics, real-life examples, and insights into current hacking trends, this talk delves into the pivotal role these logs play and how they can evade even the best cybersecurity solutions available today.