The Rise of Infostealer Data in Propaganda and Fraud

This Hudson Rock analysis documents three recent cases where aggregated credentials from historical infostealer infections were repurposed to create false breach narratives and enable scams: (1) the Haghjoyan group's claim of infecting thousands of Israeli computers, (2) a threat actor offering a purported AnyDesk database for sale on a cybercrime forum, and (3) an anonymous paste alleging a leak from Andrew Tate’s site. Cross-checks against Hudson Rock's cybercrime intelligence showed the samples originated from older infostealer compromises, illustrating the growing use of stolen credential datasets for disinformation, fraud, and reputational harm rather than evidence of new targeted breaches.