From Amadey to Stealc, shared infrastructure makes tracking easier, but the 140k infected devices show that defenses need to accelerate—hackers are already dividing their supply chain, so security teams can't keep focusing on single points.

Microsoft's Digital Crimes Unit uses AI tools like Copilot to analyze the malware Amadey and Stealc, discovering that they share the same digital infrastructure, avoiding cumbersome manual audits. In the first two weeks of May, over 140k devices were infected worldwide. Microsoft can file a single civil lawsuit in court, alleging violations of the U.S. RICO Act, and sue multiple parties jointly, while cooperating with Europol, German police, Dutch and Danish police, as well as IBM and Proofpoint. The DCU states that AI is driving hackers toward specialized supply chain division of labor, and security teams need to expand their defense from a single attacker to the entire toolchain.