lohaco.jp Domain Breach Exposure Report

The telemetry indicates a significant exposure of client data, with 387 historical data breaches and 91 active infostealer logs observed over the reporting period. The majority of these events, 81%, are attributed to historical data breaches, suggesting a persistent vulnerability or a large volume of past compromises. The infostealer activity, while less frequent at 19%, represents an ongoing threat. The primary targets appear to be client credentials and potentially sensitive information, as evidenced by the high volume of client-related events and the presence of infostealer logs. The domain lohaco.jp and its associated login and home pages are frequently targeted, alongside the broader domain itself. Malware families such as Redline and LummaC2 are associated with this activity. Geographically, the United States, Germany, and South Korea show the highest incidence of related events, though Japan is also present. The exposure is primarily linked to "Combolist sources" and "Database dumps," indicating credential stuffing or data exfiltration as the likely attack vectors.