adcash.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting adcash.com, with 6,022 total events observed over the period. The majority of these events, 92.7%, are historical data breaches, totaling 5,585 incidents. Additionally, 437 active infostealer logs were detected, representing 7.3% of the total events. The data breaches are predominantly linked to "Combolist sources" (98.6%), suggesting compromised credentials. The infostealer logs are associated with malware families such as Redline (21.5%), LummaC2 (18.3%), and Acreed (8%), which are known for credential theft. The timeline shows a surge in client-related events in March 2026, with 1,683 incidents, and employee-related events peaking in April 2026 with 87 incidents. The primary targeted services are related to adcash.com's registration and sign-in pages, indicating potential credential stuffing or phishing attempts against users of the service. The affected geographies include the United States, France, and Brazil. The risk score of 85 highlights a high level of concern. Given the high volume of data breaches originating from combolists and the prevalence of infostealer malware targeting credentials, the primary risk is account compromise and potential further downstream impacts. The focus for remediation should be on immediate credential hygiene, including mandatory password resets for all users, enhanced monitoring for suspicious login activity on adcash.com, and user education regarding phishing and credential security. Further investigation into the root cause of the data breaches and the specific infostealer campaigns is recommended to prevent recurrence.