Newsletter: FLARE

This week, Forbes published a study based on a CyberNews article that detailed the leak of 16 billion login credentials. We would like to highlight a key part of this viral story: “30 exposed datasets, each containing tens of millions to over 3.5 billion records,” were discovered. Aggregating existing stolen data is a common practice in the cybercrime ecosystem and one of the many datasets our partner Flare collects today.

Organizations that have a monitoring program in place and actively scan for compromised credentials should already be covered, as the study suggests that this data comes from both “old and current infostealer logs” as well as “credential stuffing sets and repackaged leaks.”

Flare has likely already collected the referenced data. If we consider compromised credentials to be the sum of usernames/passwords and cookies (which are used during authentication), Flare has accumulated more than 33 billion records over the past year through information-stealing malware.

Staying proactive is the best defense. We will continue to monitor the situation and keep you updated as soon as more information becomes available.