99acres.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting 99acres.com, with a high volume of historical data breaches and active infostealer logs. The majority of the exposure stems from historical data breaches, accounting for 88.8% of the total events, alongside a substantial 11.2% from active infostealer logs. This suggests a persistent threat landscape where both past compromises and ongoing credential harvesting are prevalent. The data breach events are heavily concentrated in "Combolist sources," indicating a widespread availability of compromised credentials, likely affecting a large number of clients (92,294) and a smaller number of employees (735). The timeline shows a surge in client-related events in March 2026, coinciding with a spike in employee-related events in January 2026, potentially indicating coordinated attacks or the exploitation of vulnerabilities discovered around those periods. Malware families like LummaC2, Vidar, Redline, and Rhadamanthys are frequently observed, all known for their credential-stealing capabilities, further corroborating the infostealer activity. The primary geographical focus appears to be India, with a notable presence in the United States and the United Arab Emirates.