company

SpyCloud

Identity risk company that collects credentials, session cookies and other data recaptured from breaches and infostealer malware logs, and sells exposure monitoring and remediation to enterprises.

Current clusters

security5 publishers

EvilTokens rented an AI-powered inbox-scanning tool and a device-code MFA bypass for a $1,500 fee plus $500 a month

Microsoft's Digital Crimes Unit and its partners pulled down the EvilTokens phishing service about seven months after it launched, and British police arrested its two suspected operators. The authentication technique it sold survives on other platforms.

Publishers:bleepingcomputer.comcyberscoop.commicrosoft.comthehackernews.comtherecord.media

Perspective Coverage

5 publishers

Builder: Builder 43%
Operator: Operator 40%
Investor: Investor 17%

Reality

Evidence72
Adoption78
Hype gap+18
Incentives66
Confidence74

security1 publisher

One infected device at a smart meter vendor held logins to 167 utility metering tenants

SpyCloud measured stolen-credential exposure across 10,000 EPA-registered water and wastewater organizations and found it at nearly one in five, with the sharpest single case sitting on a supplier's machine.

Publishers:cyberscoop.com

Reality

Evidence58
Adoption25
Hype gap+18
Incentives72
Confidence52