Infostealer logs fuel surge in credential-based initial access — 4 billion records in circulation
·CredentialsHigh
Security researchers reported a new high-water mark in stolen credential availability, with infostealer malware generating logs that give attackers valid usernames and passwords for corporate SSO, VPN and SaaS tools.
Deception angle
Stolen credentials are tried against every accessible service. A decoy Keycloak or identity provider endpoint catches credential stuffing in the first minutes of an attempted intrusion, before any real system is touched.
Read about Kandaro Deception, or browse more security news.