huya.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting huya.com, with a risk score of 100. The primary concerns are historical data breaches (60.9%) and active infostealer logs (39.1%), totaling over 87,000 events. The data suggests a widespread compromise affecting approximately 87,182 clients and 486 employees. The timeline shows a surge in client-related events from August 2025 through April 2026, with employee-related events peaking in March and April 2026. Malware families such as Rhadamanthys, Redline, and LummaC2 are prevalent, often associated with infostealer activities. Geographically, China, Indonesia, and Brazil are the most affected countries. The exposure is linked to combolist sources, indicating potential credential stuffing or account takeover attempts. Given the high risk score and the nature of the events, this situation requires immediate attention. The focus should be on identifying the root cause of the data breaches and infostealer activity, assessing the full extent of client and employee data compromised, and implementing robust credential hygiene measures. Prioritize the remediation of vulnerabilities exploited by the identified malware families and strengthen defenses against credential stuffing attacks targeting services like the Nimo app and the aq.huya.com login portal.