The Russian Market has become a prominent hub for buying and selling stolen credentials from infostealer malware, especially after the takedown of other markets like Genesis and Raccoon. The marketplace’s extensive variety and low prices have maintained its popularity, with logs containing SaaS and SSO credentials being especially targeted. #RussianMarket #Infostealers
Keypoints
- The Russian Market is a leading platform for trading stolen credentials from infostealer malware.
- Most stolen logs, primarily from Lumma and Acreed, contain sensitive data like passwords and cookies.
- Law enforcement actions have disrupted Lumma’s operations, but developers are attempting to rebuild.
- Acreed is rapidly gaining popularity following Lumma’s decline, with over 4,000 logs uploaded in its first week.
- Infection methods include phishing, malvertising, and social media videos, emphasizing the need for vigilant cybersecurity practices.