bankmellat.ir Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting bankmellat.ir, with 60,159 historical data breaches and 11,553 active infostealer logs observed over the reporting period. The majority of these events are linked to "Combolist sources" (99.8%), suggesting compromised credentials. The timeline shows a notable increase in client-related events throughout 2025 and early 2026, peaking in March 2026 with over 17,000 client events. Malware families such as Redline, LummaC2, and Rhadamanthys are prevalent, indicating active credential harvesting and data exfiltration attempts targeting banking services like ebanking.bankmellat.ir. Given the high volume of data breaches and active infostealer logs, coupled with the targeting of critical banking services, this incident presents a high-risk scenario. The primary focus for remediation should be on credential hygiene, including mandatory password resets for all employees and clients, enhanced multi-factor authentication deployment, and immediate investigation into the "Combolist sources" to identify the extent of compromised accounts. Continuous monitoring for infostealer activity and further analysis of the identified malware families are crucial to mitigate ongoing threats.