hh.ru Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting the hh.ru domain, with a high risk score of 99. The primary concern stems from 48,135 historical data breaches and 7,347 active infostealer logs, impacting a large number of clients (54,716) and employees (766) over the period of July 2025 to June 2026. The data breaches represent 86.8% of the total events, while infostealer logs constitute 13.2%. Key malware families identified include Redline, Rhadamanthys, and LummaC2, commonly associated with credential theft. The targeted services are predominantly login pages for hh.ru, suggesting a focus on account compromise. The high volume of historical data breaches and active infostealer activity, coupled with the prevalence of credential-stealing malware, presents a critical risk to the organization and its users. The majority of leaked data appears to originate from "Combolist sources," indicating a widespread reuse of compromised credentials. Remediation efforts should prioritize credential hygiene, multi-factor authentication enforcement, and enhanced monitoring for unauthorized access attempts targeting user accounts and login endpoints. Given the nature of the domain (job recruitment), the closest industry sector is Retail & E-commerce.