A Study of 49.7 Million Compromised Token Matches Reveals What Password-Stealing Infostealers Find

An analysis of 49.7 million compromised token matches drawn from more than 50 million infostealer detections found exposed credentials across services including PayPal, Twitch, Google Gemini and Azure, according to Lunar Cyber. The study describes infostealer malware on developer machines capturing passwords, stored browsing sessions, configuration files and API keys, and notes that security teams may identify an infection only after the credentials are already exposed.

Analysis of over 50 million detections from PayPal to Twitch, Google Gemini to Azure shows exposed credentials are everywhere. Imagine a developer’s laptop infected by an infostealer. The malware captures passwords and stored browsing sessions. It can also capture configuration files, settings, and other files containing API keys. A security team may identify the infection … The post A Study of 49.7 Million Compromised Token Matches Reveals What Password-Stealing Infostealers Find https://lunarcyber.com/blog/a-study-of-49-7-million-compromised-token-matches-reveals-what-password-stealing-infostealers-find/ appeared first on Lunar Cyber https://lunarcyber.com .