Dark Web Exposure for threads.net
Credentials, devices and data found in dark web stealer logs & breaches
78
Exposure level: High
threads.net scores 78/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago
Last 90 days +39%
2% reuse a top-10 password
Employee exposure
corporate accounts — @threads.net
3
leaked credentials · 3 compromised devices
Top exposed employee accounts
ramy_sale***@threads.net2
fra.pacc***@threads.net1
Where staff accounts were caught
www.instagram.com2
Customer exposure
stolen logins for threads.net
45,537
leaked credentials · 2,092 compromised devices
Top exposed customer accounts
cecy__cn28
ksa3omer23
ctrlberlin21
fakefriedrich19
william.marche***@gmail.com18
Most targeted services
www.threads.net31,236
78w.threads.net5
81w.threads.net3
mxwww.threads.net3
68w.threads.net2
45,540
Exposed Credentials
Exposure over time (credentials leaked per month)
2024-012026-05
Most common passwords 2% reuse a top-10 password
aw***20117
Nk***88105
ss***pp105
as***ng104
Sa***94103
Ni***78102
$#***!!100
Ri***2397
No***0994
wh***1!87
Stolen sessions (active cookies that can bypass MFA)
youtube.com145,128
google.com84,055
adnxs.com52,867
pubmatic.com50,294
bing.com49,697
criteo.com42,011
Compromised despite antivirus (AV installed on infected devices)
Windows Defender33
Avast Antivirus4
McAfee4
360 Total Security1
ESET Security1
Malwarebytes1
Financial, crypto & app tokens
Crypto wallets
metamask87
coinbase16
phantom7
exodus2
App / session tokens
Google1,851
Discord183
Telegram41
Where devices were compromised (by country)
Colombia [CO]9
Peru [PE]9
Chile [CL]6
IN3
Mexico [MX]3
Top cities
Lima5
Santiago4
Montería3
Bogotá2
Puente Alto2
Browsers & apps affected
Microsoft Edge (Default)196
Google Chrome (Default)147
Edge [Default]66
Google Chrome (Profile 1)59
Browser/Logins/Edge_Default[6d9bf46f].txt44
Chrome [Default]26
Stealer malware families seen
RedLine
META
Figures are aggregate counts derived from dark web stealer logs and public breach data.
Data is indicative and updated periodically.