nguyentandung.org Domain Breach Exposure Report

The domain nguyentandung.org has been associated with 24 security events over the past year, including 13 historical data breaches and 11 active infostealer logs. The data indicates a significant exposure of client information, with 23 client-related events and one employee-related event. The infostealer activity primarily involves the Acreed malware family, accounting for 45.5% of observed malware, and targets login pages, particularly for registration and invalid username/password attempts. The majority of the leaked data originates from "Combolist sources" (92.3%), suggesting credential stuffing or reuse is a significant factor. The exposure period shows a notable increase in client-related events from September 2025 onwards, peaking in May and June 2026. Given the high volume of data breaches and active infostealer logs targeting client credentials, this exposure poses a critical risk. The prevalence of "Combolist sources" indicates that compromised credentials from other services are likely being used against this domain, potentially leading to account takeovers and further downstream impacts. Remediation should focus on strengthening authentication mechanisms, implementing robust credential monitoring, and investigating the source of the "Combolist" data to prevent further compromise. The primary affected sector appears to be related to online services or platforms, suggesting a "Technology & SaaS" industry classification.