maybank2u.com.my Domain Breach Exposure Report

The telemetry indicates a significant exposure of client data, with over 130,000 historical data breaches and over 27,000 active infostealer logs targeting the maybank2u.com.my domain. The majority of these events originate from combolist sources, suggesting credential stuffing or account takeover attempts. The timeline shows a notable increase in client-related events from March 2026 onwards, coinciding with a rise in employee-related events. Malware families like Redline, LummaC2, and Rhadamanthys are prevalent, indicating active credential harvesting operations. Given the high volume of data breaches and active infostealer logs, this exposure presents a critical risk to Maybank's clients and potentially its employees. The primary remediation focus should be on enhancing credential security, implementing robust multi-factor authentication across all services, and actively monitoring for and mitigating credential stuffing attacks. Investigating the source of the combolist data and understanding the specific data compromised in the historical breaches is also crucial.