Uploaded August 2026 | Updated September 2026, 3 hours ago
Introducing StealerLens: An LLM-Powered Forensics Microscope to Accelerate InfoStealer Investigations
Olivier BilodeauOlivier Bilodeau (Flare, CA)
Information stealer malware represents a critical threat vector, with over 50 million stealer logs posted in 2025 alone, creating an analysis bottleneck impossible to address at scale. These logs contain rich forensic artifacts revealing infection vectors and malware‑campaign behaviors — insights that remain untapped due to manual analysis requirements.
Building upon our BlackHat USA 2025 work on LLM‑based infection screenshot analysis (“Hackers Dropping Mid‑Heist Selfies”), we introduce StealerLens, an LLM‑powered forensic tool to accelerate infostealer log investigations.
---
Olivier Bilodeau, a principal researcher at Flare, brings 12+ years of cutting-edge infosec expertise in honeypot operations, binary reverse-engineering, and RDP interception. Passionate communicator, Olivier spoke at conferences like BlackHat, DEFCON, SecTor, Derbycon, and more. Invested in his community, he co-organizes MontréHack, is NorthSec’s Vice-president, and runs its Hacker Jeopardy.
Introducing StealerLens: An LLM-Powered Forensics Microscope to Accelerate InfoStealer Investigations
Olivier BilodeauOlivier Bilodeau (Flare, CA)
Information stealer malware represents a critical threat vector, with over 50 million stealer logs posted in 2025 alone, creating an analysis bottleneck impossible to address at scale. These logs contain rich forensic artifacts revealing infection vectors and malware‑campaign behaviors — insights that remain untapped due to manual analysis requirements.
Building upon our BlackHat USA 2025 work on LLM‑based infection screenshot analysis (“Hackers Dropping Mid‑Heist Selfies”), we introduce StealerLens, an LLM‑powered forensic tool to accelerate infostealer log investigations.
---
Olivier Bilodeau, a principal researcher at Flare, brings 12+ years of cutting-edge infosec expertise in honeypot operations, binary reverse-engineering, and RDP interception. Passionate communicator, Olivier spoke at conferences like BlackHat, DEFCON, SecTor, Derbycon, and more. Invested in his community, he co-organizes MontréHack, is NorthSec’s Vice-president, and runs its Hacker Jeopardy.
