Massive Credential Exposure Highlights Growing Threat of Infostealer Malware In mid-June, researchers uncovered an alarming dataset containing 8 terabytes of exposed credentials, totaling approximately 24 billion records one of the largest compilations of stolen login data to date. Unlike traditional breaches targeting a single organization, this incident stems largely from infostealer malware, which silently harvests credentials, session cookies, and authentication tokens directly from infected devices. Security experts warn that this method poses a broader and more persistent threat than conventional breaches. Phil Wylie, Senior Consultant at Suzu Labs, emphasized that attackers with access to active sessions and tokens can bypass password changes, making phishing-resistant multi-factor authentication (MFA), endpoint protection, and continuous monitoring critical defenses. John Strand of Black Hills Information Security added that the security industry often overlooks identity-based threats in favor of high-profile exploits, despite their equal danger. The exposed data aggregates information from multiple prior incidents, underscoring the long-term risks of credential theft and the need for organizations to assume eventual exposure. The discovery serves as a stark reminder of the evolving threat landscape, where identity has become the new perimeter in cybersecurity.