Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Infostealer Intelligence

Credential exposure data sourced from HudsonRock — covering domains linked to ransomware victims tracked on this platform.

What is an Infostealer?
An infostealer is a type of malware designed to silently harvest credentials, session cookies, browser-saved passwords, and other sensitive data from infected machines. Stolen records are packaged into logs and sold on underground markets, giving threat actors ready-made access to corporate systems — often before a ransomware attack is ever launched. The data on this page correlates known infostealer-compromised credentials with ransomware victims tracked by this platform, revealing the credential-exposure footprint that preceded or accompanied each attack.
Domains Tracked
22,971
Employees Exposed
360,692
Users Exposed
33,950,584
Stealer Families
19

Top Stealer Families

Domains Ingested per Month

Top Sectors with Exposed Employees

Employees vs Users — Top Families

Top Countries — Victims with Infostealer Data

Top Countries by % of Victims with Infostealer Data (min. 50 matches)

Most Exposed Domains

# Domain Employees Users 3rd Parties Total
1 linkedin.com 761 3,925,135 323 3,925,896
2 epicgames.com 236 2,771,943 79 2,772,179
3 github.com 299 2,504,650 117 2,504,949
4 ubisoft.com 378 2,080,174 375 2,080,552
5 sony.com 273 1,899,260 643 1,899,533
6 nintendo.com 115 1,237,367 32 1,237,482
7 udemy.com 40 1,157,708 17 1,157,748
8 hbomax.com 259 1,005,189 100 1,005,448
9 reddit.com 147 857,694 29 857,841
10 wordpress.com 382 780,450 166 780,832

Top 20 Ransomware Groups by % of Victims with Infostealer Data (min. 10 matches)

# Group Victims with stealer data % of group victims
1 ralord 12 / 12 100.0%
2 lapsus$ 18 / 19 94.7%
3 siegedsec 10 / 11 90.9%
4 shinyhunters 77 / 88 87.5%
5 dunghill 13 / 15 86.7%
6 hellcat 16 / 20 80.0%
7 dragonransomware 31 / 39 79.5%
8 ransomexx 24 / 32 75.0%
9 snatch 44 / 62 71.0%
10 apt73 107 / 154 69.5%
11 coinbasecartel 109 / 163 66.9%
12 funksec 101 / 154 65.6%
13 moneymessage 17 / 26 65.4%
14 babuk2 88 / 135 65.2%
15 darkvault 34 / 54 63.0%
16 fulcrumsec 15 / 24 62.5%
17 ransomed 30 / 48 62.5%
18 nova 75 / 122 61.5%
19 settra 13 / 22 59.1%
20 lockbit2 13 / 23 56.5%