qoo10.jp Domain Breach Exposure Report

The domain qoo10.jp has experienced a significant number of data breaches and active infostealer logs, totaling over 26,000 events within the reporting period. The majority of these events are historical data breaches, but the presence of 3,755 active infostealer logs indicates ongoing compromise. Notably, employee accounts were affected in 79 instances, while client accounts suffered over 25,000 compromises. The timeline shows a peak in employee compromises during March and April 2026, coinciding with high client compromise numbers. Malware families such as Vidar, Rhadamanthys, and LummaC2 are frequently observed, suggesting credential harvesting and data exfiltration are primary threats. The targeted services are primarily login pages for qoo10.jp, indicating credential stuffing or phishing attacks targeting user accounts.