GoKawiilFlare research finds nearly half of leaked corporate credentials trace to personal devices
A new practitioner's guide from Flare Research examines how infostealer malware like Vidar, RedLine and Lumma harvest corporate logins, browser cookies and saved credentials from infected machines. The study found that about 46% of stealer logs containing corporate credentials came from likely unmanaged or personal devices, and that exposure of credentials and sessions tied to major SaaS and cloud platforms is climbing roughly 29% each year.