‘RUSSIAN MARKET' EMERGES AS A GO-TO SHOP FOR STOLEN CREDENTIALS

Summary from the TLDR InfoSec newsletter

The "Russian Market" cybercrime marketplace has become a leading platform for buying and selling stolen credentials, with logs available for as low as $2 and containing data from information-stealing malware, including passwords, session cookies, and credit card details. The marketplace has grown significantly following the takedown of Genesis Market, with 61% of stolen logs containing enterprise SaaS credentials from platforms like Google Workspace and Salesforce, and 77% including single sign-on credentials. Lumma stealer previously dominated 92% of the market but faces disruption from recent law enforcement actions, while a new stealer called Acreed is rapidly gaining traction with over 4,000 logs uploaded in its first week.