google.jo Domain Breach Exposure Report

The domain google.jo has experienced a significant number of historical data breaches, totaling 437 events, which constitute 83.9% of all observed events. Additionally, there were 84 active infostealer logs, representing 16.1% of events. The timeline indicates a surge in client-related events starting in August 2025, with a notable increase in both employee and client events in March and April 2026. Malware families associated with these events include LummaC2 and Redline, both at 15.5%. The majority of data breaches originate from "Combolist sources," suggesting compromised credential reuse. The high volume of historical data breaches and active infostealer logs, coupled with the prevalence of LummaC2 and Redline malware, indicates a substantial risk of credential compromise and potential further exploitation. The affected entities include 110 employees and 411 clients, with a concentration of activity in the United States, Japan, and Germany. Remediation efforts should focus on enhancing credential hygiene, implementing multi-factor authentication, and monitoring for further infostealer activity and data exfiltration.