hamusoku.com Domain Breach Exposure Report

The domain hamusoku.com has been associated with a significant number of historical data breaches, totaling 308 events, which constitute 80.6% of all observed events. Additionally, there are 74 instances of active infostealer logs, representing 19.4% of the total. The timeline indicates a surge in client-related events from August 2025 through June 2026, with employee-related events appearing later, peaking in April 2026. Malware families identified include Redline and LummaC2, with Redline being more prevalent. The exposure primarily targets the hamusoku.com domain and its subdomains, with a notable presence of Citrix services. Geographically, the United States accounts for the largest portion of associated activity. The high volume of historical data breaches and active infostealer logs, coupled with the presence of infostealer malware like Redline, suggests a substantial risk of credential compromise and potential further data exfiltration. The increasing trend of employee and client events, particularly in early to mid-2026, indicates a growing exposure. Prioritization should focus on investigating the root cause of the historical data breaches, enhancing security measures to prevent further infostealer infections, and securing credentials associated with the hamusoku.com domain and any exposed Citrix services.