58.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting 58.com, with a high risk score of 99. The primary threat vectors are historical data breaches, accounting for 85% of events, and active infostealer logs at 15%. A total of 13,413 data breach events and 2,363 infostealer events were observed over the reporting period. The timeline shows a surge in employee and client-related events, particularly in September 2025 and March 2026, suggesting a sustained period of compromise. Malware families like Rhadamanthys, Redline, and LummaC2 are prevalent, indicating active credential harvesting and data exfiltration. The targeted services are primarily related to the 58.com passport and login infrastructure, suggesting account compromise is a key objective. The majority of leak repository data originates from combolist sources, further supporting credential stuffing or account takeover as a primary attack method.