Ransomware.live 👀

Credential exposure data sourced from HudsonRock — covering domains linked to ransomware victims tracked on this platform.

What is an Infostealer?
An infostealer is a type of malware designed to silently harvest credentials, session cookies, browser-saved passwords, and other sensitive data from infected machines. Stolen records are packaged into logs and sold on underground markets, giving threat actors ready-made access to corporate systems — often before a ransomware attack is ever launched. The data on this page correlates known infostealer-compromised credentials with ransomware victims tracked by this platform, revealing the credential-exposure footprint that preceded or accompanied each attack.

Domains Tracked

24,711

Employees Exposed

399,144

Users Exposed

31,509,332

Stealer Families

Top Stealer Families

Domains Ingested per Month

Top Sectors with Exposed Employees

Employees vs Users — Top Families

Top Countries — Victims with Infostealer Data

Top Countries by % of Victims with Infostealer Data (min. 50 matches)

Most Exposed Domains

#	Domain	Employees	Users	3rd Parties	Total
1	epicgames.com	236	2,771,943	79	2,772,179
2	github.com	299	2,504,650	117	2,504,949
3	ubisoft.com	396	2,170,058	397	2,170,454
4	sony.com	273	1,899,260	643	1,899,533
5	nintendo.com	115	1,237,367	32	1,237,482
6	udemy.com	40	1,157,708	17	1,157,748
7	hbomax.com	259	1,005,189	100	1,005,448
8	reddit.com	147	857,694	29	857,841
9	wordpress.com	398	803,667	178	804,065
10	microsoft.com	15,870	570,284	4,491	586,154

Top 20 Ransomware Groups by % of Victims with Infostealer Data (min. 10 matches)

#	Group	Victims with stealer data	% of group victims
1	ralord	12 / 12	100.0%
2	lapsus$	18 / 19	94.7%
3	ExfilSquad	13 / 14	92.9%
4	siegedsec	10 / 11	90.9%
5	shinyhunters	80 / 91	87.9%
6	dunghill	13 / 15	86.7%
7	hellcat	16 / 20	80.0%
8	dragonransomware	31 / 39	79.5%
9	ransomexx	24 / 32	75.0%
10	snatch	44 / 63	69.8%
11	apt73	108 / 156	69.2%
12	coinbasecartel	113 / 167	67.7%
13	marketo	10 / 15	66.7%
14	funksec	101 / 154	65.6%
15	babuk2	88 / 135	65.2%
16	moneymessage	17 / 27	63.0%
17	darkvault	34 / 54	63.0%
18	fulcrumsec	15 / 24	62.5%
19	nova	84 / 136	61.8%
20	ransomed	30 / 49	61.2%

Infostealer Intelligence