Infostealer Study of 170,298 Victims Finds Credentials for Law-Enforcement Domains and All Eight Ivy League Universities

arXiv·medium signalXBlueskyLinkedInCopy link

Paju, Nurmi, Arroyo et al. (arXiv 2609.30070) built a privacy-preserving pipeline that turns illicitly sourced infostealer logs from multiple malware families into a research dataset of 170,298 victims. The compromised services mirror the most popular platforms, with gaming overrepresented, and include law-enforcement, government and military domains, all eight Ivy League universities, and remote-access and development platforms. Victims show widespread credential reuse and overlap with phishing and ransomware populations. The authors release the first anonymized victim-level infostealer dataset under controlled access.