Blog
Notes on breach data and stealer logs: what the records actually contain, how to read one, and what to do about what you find.
How to check if your information has been leaked
Four different things get called a leak and each one needs a different response. Where to check for free, how to read a match, and why a device capture means more than a leaked password.
Stealer logs are the easiest path to a data breach
Commodity malware on one personal computer now yields more usable access than most database breaches. What an infostealer takes in a single sweep, how the archive is packaged and sold, and why rotating a password does not close it.