The Rise of Service-Centric Credential Compilations

*Executive Summary:* Cybercriminals have shifted from trading massive raw infostealer dumps to selling curated, service-specific packages—combining credentials, browser cookies, session tokens and contextual metadata—that enable immediate account takeover and access to high-value services (notably enterprise AI platforms); defenders should prioritize rapid session invalidation, token revocation, continuous monitoring and visibility into underground marketplaces.