google.com.vn Domain Breach Exposure Report

The telemetry indicates a significant exposure related to the domain google.com.vn, with a high risk score of 89. Over the observed period, there were 2,592 total events, predominantly comprising historical data breaches (87.7%) and active infostealer logs (12.3%). The data breaches affected 2,274 entities, while infostealer activity involved 318 instances. Employee exposure accounted for 581 events, and client exposure for 2,011 events. The timeline shows a surge in client-related events in September 2025 and February 2026, and employee-related events peaking in September 2025 and February 2026. Malware families associated with this activity include LummaC2 (23%), Redline (20.4%), and Rhadamanthys (9.4%). The majority of data leak sources are identified as "Combolist sources" (87.2%), suggesting credential stuffing or similar attacks leveraging previously compromised credentials. The primary geographical origin of the telemetry is Vietnam (70.9%), followed by the United States (17.1%). Given the high volume of data breaches and active infostealer logs, coupled with the involvement of credential-harvesting malware like LummaC2 and Redline, this exposure presents a critical risk. The prevalence of "Combolist sources" indicates a high likelihood of compromised credentials being used in further attacks. Prioritization should focus on immediate credential hygiene for both employees and clients, including mandatory password resets and enabling multi-factor authentication. Investigating the root cause of the data breaches and infostealer activity is crucial to prevent recurrence. Remediation efforts should also address the specific malware families identified and assess the extent of compromise across affected systems, particularly those running Windows 11 and Windows 10.