In the latest ChannelE2E webinar with Flare, we did a deep dive into infostealer malware and implications of account takeovers.
For some quick insight into the impact of infostealers, threat actors are able to utilize the information gathered to gain access to personal data like saved logins, session cookies, credit card info and more. Their goal? A quick payout.
But when work and personal activity mix, corporate data gets swept up too.
We analyzed stealer log exposure across 100 companies(half with a known breach, and half without) and found:
-
90% of breached companies had corporate credentials in a stealer log
-
78% had those credentials exposed within 6 months of the breach
-
For companies with no known breach, 68% had credentials in a stealer log
These exposures aren't rare. They're happening quietly, and at scale. Flare processes over 500,000 new logs every week; see our full research breakdown.