vnexpress.net Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting vnexpress.net, with a high risk score of 97. The primary concern stems from 23,883 historical data breaches, predominantly from "Combolist sources," and 4,935 active infostealer logs. These events suggest a widespread compromise affecting approximately 27,905 clients and 913 employees over the period from July 2025 to June 2026. The infostealer activity is linked to malware families such as LummaC2, Redline, and Rhadamanthys, targeting authentication services on the vnexpress.net domain. The high volume of historical data breaches and active infostealer logs, coupled with the targeting of login and registration services, presents a critical risk of further credential compromise and potential account takeovers. The prevalence of Windows operating systems among affected devices suggests a focus on endpoints. Prioritization should be given to investigating the source of the data breaches, enhancing authentication mechanisms, and implementing robust endpoint security measures to detect and mitigate ongoing infostealer activity.