Active infostealer infections have been found within U.S. agencies and defense contractors.