With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

Have I Been Pwned received and processed a massive corpus of info‑stealer logs (23 billion rows) sourced from a Telegram marketplace called Alien Txtbase, which contained 493 million unique website/email pairs and 284 million unique email addresses; HIBP added 244 million new compromised passwords and updated counts for many more. The report details how credential‑stealing malware harvests and exfiltrates user credentials, how those logs are sold and used for downstream crimes (account takeover, ransomware, data theft), and mentions new paid HIBP APIs for querying stealer logs.