Threat Spotlight: Leaked Credentials and Geography

A navy background with the white text "Leaked Credentials & Geography"

Executive Summary Leaked credentials are the cause of many cyberattacks, and the number of them on the dark web continues to grow rapidly: there are over 10 billion unique username password combinations once duplicates and combo lists have been removed.  Flare has been monitoring and archiving the dark web for over 5 years, which has […]

Threat Spotlight: Leaked Credentials

threat spotlight

Executive Overview Stolen credentials continue to represent the primary means of compromise for the majority of data breaches and cyberattacks. The number of leaked credentials on the dark web has also expanded considerably, approaching over 10 billion unique username password combinations once duplicates and combo lists have been removed.  We looked into stolen credentials for […]

Threat Spotlight: Illicit Telegram Markets & OTP Bots

threat spotlight

Executive Summary The threat landscape is rapidly changing. Threat actors who traditionally bought and sold malware, login credentials, and sensitive information on markets found on TOR (The Onion Router) are increasingly moving off of the “dark web” and on to clear web sites and instant messaging platforms such as Discord and Telegram. In today’s threat […]

Threat Spotlight: Infected Devices & the Growing Threat of Stealer Malware 

Executive Summary Infected Device Markets continue to grow on both the dark and clear web. Essentially these markets sell access to infected computers & browser fingerprints that can be used by threat actors to compromise online accounts. Even unsophisticated threat actors can purchase browser fingerprints for as little as $10, and gain access to hundreds […]