ibtimes.co.uk Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting 316 clients and 47 employees of ibtimes.co.uk between July 2025 and June 2026. The primary concern stems from 333 historical data breaches and 30 active infostealer logs, with "Combolist sources" accounting for over 91% of leak repository classifications. Malware families such as LummaC2, Rhadamanthys, Acreed, Redline, and Vidar were observed, suggesting potential credential harvesting and unauthorized access. The targeted services are primarily related to the "sns.ibtimes.co.uk" subdomain, indicating a focus on user account or newsletter signup functionalities. Given the high volume of historical data breaches and the presence of active infostealer activity, this event poses a critical risk to the organization and its users. The prevalence of combolists suggests that compromised credentials from other sources are being used to target ibtimes.co.uk accounts. Remediation efforts should prioritize securing the "sns.ibtimes.co.uk" services, investigating the root cause of the historical data breaches, and implementing robust credential hygiene measures for both employees and clients. Continuous monitoring for infostealer activity and further analysis of the observed malware families are also recommended.