1<!doctype html> 2<html lang="en-US"> 3<head> 4 <meta charset="UTF-8"> 5 <meta name="viewport" content="width=device-width, initial-scale=1"> 6 <link rel="profile" href="https://gmpg.org/xfn/11"> 7
7<script type="text/javascript" data-cookieconsent="ignore"> 8 window.dataLayer = window.dataLayer || []; 9 10 function gtag() { 11 dataLayer.push(arguments); 12 } 13 14 gtag("consent", "default", { 15 ad_personalization: "denied", 16 ad_storage: "denied", 17 ad_user_data: "denied", 18 analytics_storage: "denied", 19 functionality_storage: "denied", 20 personalization_storage: "denied", 21 security_storage: "granted", 22 wait_for_update: 500, 23 }); 24 gtag("set", "ads_data_redaction", true); 25 </script>
vendor: 1 bytes, line 25
25
26<script type="text/javascript" 27 id="Cookiebot" 28 src="https://consent.cookiebot.com/uc.js" 29 data-implementation="wp" 30 data-cbid="06219fe9-d0c9-4e38-ac40-bb2b36df50a0" 31 data-culture="EN" 32 data-blockingmode="auto" 33 ></script>
33 34<title>From a Stolen Login to a Ransomware Leak Site | Constella</title><link rel="preload" data-smush-preload as="image" href="https://constella.ai/wp-content/uploads/randsomware-leaks.jpg" fetchpriority="high" /> 35<meta name='robots' content='max-image-preview:large' /> 36 37<!-- Google Tag Manager for WordPress by gtm4wp.com -->
38<script data-cfasync="false" data-pagespeed-no-defer data-cookieconsent="ignore"> 39 var gtm4wp_datalayer_name = "dataLayer"; 40 var dataLayer = dataLayer || []; 41 (function(){function gtag(){dataLayer.push(arguments);}gtag('set', 'developer_id.dNGJiYT', true);})(); 42</script>
42 43<!-- End Google Tag Manager for WordPress by gtm4wp.com --><link rel='dns-prefetch' href='//js.hs-scripts.com' /> 44<link rel="alternate" type="application/rss+xml" title="Constella Intelligence » Feed" href="https://constella.ai/feed/" /> 45<link rel="alternate" type="application/rss+xml" title="Constella Intelligence » Comments Feed" href="https://constella.ai/comments/feed/" /> 46<link rel="alternate" title="oEmbed (JSON)" type="application/json+oembed" href="https://constella.ai/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fconstella.ai%2Fblog%2Ffrom-a-stolen-login-to-a-ransomware-leak-site%2F" /> 47<link rel="alternate" title="oEmbed (XML)" type="text/xml+oembed" href="https://constella.ai/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fconstella.ai%2Fblog%2Ffrom-a-stolen-login-to-a-ransomware-leak-site%2F&format=xml" /> 48 <style> 49 .lazyload, 50 .lazyloading { 51 max-width: 100%; 52 } 53 </style> 54 <style id="wp-img-auto-sizes-contain-inline-css"> 55img:is([sizes=auto i],[sizes^="auto," i]){contain-intrinsic-size:3000px 1500px} 56/*# sourceURL=wp-img-auto-sizes-contain-inline-css */ 57</style> 58<style id="wp-emoji-styles-inline-css"> 59 60 img.wp-smiley, img.emoji { 61 display: inline !important; 62 border: none !important; 63 box-shadow: none !important; 64 height: 1em !important; 65 width: 1em !important; 66 margin: 0 0.07em !important; 67 vertical-align: -0.1em !important; 68 background: none !important; 69 padding: 0 !important; 70 } 71/*# sourceURL=wp-emoji-styles-inline-css */ 72</style> 73<link rel='stylesheet' id='wp-block-library-css' href='https://constella.ai/wp-includes/css/dist/block-library/style.min.css?ver=7.1.2' media='all' /> 74<style id="global-styles-inline-css"> 75:root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgb(6,147,227) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgb(252,185,0) 0%,rgb(255,105,0) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgb(255,105,0) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);
75--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgb(255, 255, 255), 6px 6px rgb(0, 0, 0);--wp--preset--shadow--crisp: 6px 6px 0px rgb(0, 0, 0);}.wp-block-button{--wp--preset--dimension--25: 25%;--wp--preset--dimension--50: 50%;--wp--preset--dimension--75: 75%;--wp--preset--dimension--100: 100%;}:root { --wp--style--global--content-size: 800px;--wp--style--global--wide-size: 1200px; }:where(body) { margin: 0; }.wp-site-blocks > .alignleft { float: left; margin-right: 2em; }.wp-site-blocks > .alignright { float: right; margin-left: 2em; }.wp-site-blocks > .aligncenter { justify-content: center; margin-left: auto; margin-right: auto; }:where(.wp-site-blocks) > * { margin-block-start: 24px; margin-block-end: 0; }:where(.wp-site-blocks) > :first-child { margin-block-start: 0; }:where(.wp-site-blocks) > :last-child { margin-block-end: 0; }:root { --wp--style--block-gap: 24px; }:root :where(.is-layout-flow) > :first-child{margin-block-start: 0;}:root :where(.is-layout-flow) > :last-child{margin-block-end: 0;}:root :where(.is-layout-flow) > *{margin-block-start: 24px;margin-block-end: 0;}:root :where(.is-layout-constrained) > :first-child{margin-block-start: 0;}:root :where(.is-layout-constrained) > :last-child{margin-block-end: 0;}:root :where(.is-layout-constrained) > *{margin-block-start: 24px;margin-block-end: 0;}:root :where(.is-layout-flex){gap: 24px;}:root :where(.is-layout-grid){gap: 24px;}.is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}.is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}.is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}.is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}.is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}.is-layout-constrained > .aligncenter{margin-left: auto !important;margin-right: auto !important;}.is-layout-constrained > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}.is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}body{padding-top: 0px;padding-right: 0px;padding-bottom: 0px;padding-left: 0px;}:root :where(.wp-element-button, .wp-block-button__link){background-color: #32373c;border-width: 0;color: #fff;font-family: inherit;font-size: inherit;font-style: inherit;font-weight: inherit;letter-spacing: inherit;line-height: inherit;padding-top: calc(0.667em + 2px);padding-right: calc(1.333em + 2px);padding-bottom: calc(0.667em + 2px);padding-left: calc(1.333em + 2px);text-decoration: none;text-transform: inherit;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}
75.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} 76:root :where(.wp-block-icon svg){width: 24px;} 77:root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;} 78/*# sourceURL=global-styles-inline-css */ 79</style> 80<link rel='stylesheet' id='hello-elementor-css' href='https://constella.ai/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.5.1' media='all' /> 81<link rel='stylesheet' id='hello-elementor-theme-style-css' href='https://constella.ai/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.5.1' media='all' /> 82<link rel='stylesheet' id='elementor-frontend-css' href='https://constella.ai/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1790855621' media='all' /> 83<style id="elementor-frontend-inline-css"> 84.elementor-3551 .elementor-element.elementor-element-2a7e65ec:not(.elementor-motion-effects-element-type-background) > .elementor-widget-wrap, .elementor-3551 .elementor-element.elementor-element-2a7e65ec > .elementor-widget-wrap > .elementor-motion-effects-container > .elementor-motion-effects-layer{background-image:url("https://constella.ai/wp-content/uploads/randsomware-leaks.jpg");} 85/*# sourceURL=elementor-frontend-inline-css */ 86</style> 87<link rel='stylesheet' id='eael-general-css' href='https://constella.ai/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.8.4' media='all' /> 88<link rel='stylesheet' id='eael-1509-css' href='https://constella.ai/wp-content/uploads/essential-addons-elementor/eael-1509.css?ver=1789751609' media='all' /> 89<link rel='stylesheet' id='widget-nav-menu-css' href='https://constella.ai/wp-content/uploads/elementor/css/custom-pro-widget-nav-menu.min.css?ver=1790855621' media='all' /> 90<link rel='stylesheet' id='widget-image-css' href='https://constella.ai/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.3.2' media='all' /> 91<link rel='stylesheet' id='e-sticky-css' href='https://constella.ai/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=4.2.3' media='all' /> 92<link rel='stylesheet' id='eael-1514-css' href='https://constella.ai/wp-content/uploads/essential-addons-elementor/eael-1514.css?ver=1789751609' media='all' /> 93<link rel='stylesheet' id='widget-heading-css' href='https://constella.ai/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.3.2' media='all' /> 94<link rel='stylesheet' id='widget-post-info-css' href='https://constella.ai/wp-content/plugins/elementor-pro/assets/css/widget-post-info.min.css?ver=4.2.3' media='all' /> 95<link rel='stylesheet' id='widget-icon-list-css' href='https://constella.ai/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1790855621' media='all' /> 96<link rel='stylesheet' id='widget-share-buttons-css' href='https://constella.ai/wp-content/plugins/elementor-pro/assets/css/widget-share-buttons.min.css?ver=4.2.3' media='all' /> 97<link rel='stylesheet' id='e-apple-webkit-css' href='https://constella.ai/wp-content/uploads/elementor/css/custom-apple-webkit.min.css?ver=1790855621' media='all' /> 98<link rel='stylesheet' id='widget-posts-css' href='https://constella.ai/wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=4.2.3' media='all' /> 99<link rel='stylesheet' id='widget-post-navigation-css' href='https://constella.ai/wp-content/plugins/elementor-pro/assets/css/widget-post-navigation.min.css?ver=4.2.3' media='all' /> 100<link rel='stylesheet' id='elementor-post-49-css' href='https://constella.ai/wp-content/uploads/elementor/css/post-49.css?ver=1790855601' media='all' /> 101<link rel='stylesheet' id='elementor-post-1509-css' href='https://constella.ai/wp-content/uploads/elementor/css/post-1509.css?ver=1790855604' media='all' /> 102<link rel='stylesheet' id='elementor-post-1514-css' href='https://constella.ai/wp-content/uploads/elementor/css/post-1514.css?ver=1790855604' media='all' /> 103<link rel='stylesheet' id='elementor-post-3551-css' href='https://constella.ai/wp-content/uploads/elementor/css/post-3551.css?ver=1790855842' media='all' /> 104<link rel='stylesheet' id='font-awesome-5-all-css' href='https://constella.ai/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=6.8.4' media='all' /> 105<link rel='stylesheet' id='font-awesome-4-shim-css' href='https://constella.ai/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=6.8.4' media='all' /> 106<link rel='stylesheet' id='elementor-gf-barlowsemicondensed-css' href='https://fonts.googleapis.com/css?family=Barlow+Semi+Condensed:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic&display=swap' media='all' /> 107<link rel='stylesheet' id='elementor-gf-adventpro-css' href='https://fonts.googleapis.com/css?family=Advent+Pro:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic&display=swap' media='all' /> 108<link rel='stylesheet' id='elementor-gf-montserrat-css' href='https://fonts.googleapis.com/css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic&display=swap' media='all' />
109<script id="jquery-core-js" src="https://constella.ai/wp-includes/js/jquery/jquery.min.js?ver=3.7.1"></script>
vendor: 1 bytes, line 109
109
110<script id="jquery-migrate-js" src="https://constella.ai/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1"></script>
110 111<link rel="https://api.w.org/" href="https://constella.ai/wp-json/" /><link rel="alternate" title="JSON" type="application/json" href="https://constella.ai/wp-json/wp/v2/posts/4505" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://constella.ai/xmlrpc.php?rsd" /> 112<meta name="generator" content="WordPress 7.1.2" /> 113<link rel='shortlink' href='https://constella.ai/?p=4505' /> 114<meta name="google-site-verification" content="uQTl3duaol34dNU--lR8i_ZIsumnIY0v6IJjNOxPpmo" /> <!-- DO NOT COPY THIS SNIPPET! Start of Page Analytics Tracking for HubSpot WordPress plugin v11.3.75--> 115
115<script class="hsq-set-content-id" data-content-id="blog-post"> 116 var _hsq = _hsq || []; 117 _hsq.push(["setContentType", "blog-post"]); 118 </script>
118 119 <!-- DO NOT COPY THIS SNIPPET! End of Page Analytics Tracking for HubSpot WordPress plugin --> 120 121<!-- Google Tag Manager for WordPress by gtm4wp.com --> 122<!-- GTM Container placement set to automatic -->
123<script data-cfasync="false" data-pagespeed-no-defer data-cookieconsent="ignore"> 124 var dataLayer_content = {"pagePostType":"post","pagePostType2":"single-post","pageCategory":["insights","investigations-osint"],"pageAttributes":["credentialcompilations","infostealers","initialaccessbrokers","ransomware","thirdpartyrisk"],"pagePostAuthor":"Alberto Casares"}; 125 dataLayer.push( dataLayer_content ); 126</script>
vendor: 1 bytes, line 126
126
127<script data-cfasync="false" data-pagespeed-no-defer data-cookieconsent="ignore">
vendor: 322 bytes, lines 127-132
127 128(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': 129new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], 130j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 131'//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); 132})(window,document,'script','dataLayer','
132GTM-W5Z2LXW5
vendor: 4 bytes, line 132
132');
133</script>
133 134<!-- End Google Tag Manager for WordPress by gtm4wp.com -->
134<script> 135 document.documentElement.className = document.documentElement.className.replace('no-js', 'js'); 136 </script>
136 137 <style> 138 .no-js img.lazyload { 139 display: none; 140 } 141 142 figure.wp-block-image img.lazyloading { 143 min-width: 150px; 144 } 145 146 .lazyload, 147 .lazyloading { 148 --smush-placeholder-width: 100px; 149 --smush-placeholder-bg-max-width: 120px; 150 --smush-placeholder-aspect-ratio: 1/1; 151 width: var(--smush-image-width, var(--smush-placeholder-width)) !important; 152 aspect-ratio: var(--smush-image-aspect-ratio, var(--smush-placeholder-aspect-ratio)) !important; 153 } 154 155 .lazyload, .lazyloading { 156 opacity: 0; 157 } 158 159 .lazyloaded { 160 opacity: 1; 161 transition: opacity 400ms; 162 transition-delay: 0ms; 163 } 164 165 </style> 166 <meta name="generator" content="Elementor 4.3.2; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-swap"> 167<!-- SEO meta tags powered by SmartCrawl https://wpmudev.com/project/smartcrawl-wordpress-seo/ --> 168<link rel="canonical" href="https://constella.ai/blog/from-a-stolen-login-to-a-ransomware-leak-site/" /> 169<meta name="description" content="A ransomware disclosure and a credential package we track from an entirely separate source- a pattern our research team sees again and again." />
170<script type="application/ld+json">{"@context":"https:\/\/schema.org","@graph":[{"@type":"WPHeader","url":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/","headline":"From a Stolen Login to a Ransomware Leak Site | Constella","description":"A ransomware disclosure and a credential package we track from an entirely separate source- a pattern our research team sees again and again."},{"@type":"WPFooter","url":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/","headline":"From a Stolen Login to a Ransomware Leak Site | Constella","description":"A ransomware disclosure and a credential package we track from an entirely separate source- a pattern our research team sees again and again.","copyrightYear":"2026"},{"@type":"Organization","@id":"https:\/\/constella.ai\/#schema-publishing-organization","url":"https:\/\/constella.ai","name":"Constella Intelligence","logo":{"@type":"ImageObject","@id":"https:\/\/constella.ai\/#schema-organization-logo","url":"https:\/\/constella.ai\/wp-content\/uploads\/2025\/12\/Constella-logo_black.png","height":60,"width":60}},{"@type":"WebSite","@id":"https:\/\/constella.ai\/#schema-website","url":"https:\/\/constella.ai","name":"Constella Intelligence","encoding":"UTF-8","potentialAction":{"@type":"SearchAction","target":"https:\/\/constella.ai\/search\/{search_term_string}\/","query-input":"required name=search_term_string"},"image":{"@type":"ImageObject","@id":"https:\/\/constella.ai\/#schema-site-logo","url":"https:\/\/constella.ai\/wp-content\/uploads\/2025\/12\/Constella-logo_black.png","height":72,"width":385}},{"@type":"Person","@id":"https:\/\/constella.ai\/#schema-author-3","name":"Alberto Casares"},{"@type":"WebPage","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-webpage","isPartOf":{"@id":"https:\/\/constella.ai\/#schema-website"},"publisher":{"@id":"https:\/\/constella.ai\/#schema-publishing-organization"},"url":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/","hasPart":[{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-170","name":"Data & API","url":"#"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-237","name":"","url":"https:\/\/constella.ai\/data\/intelligence-api\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-238","name":"Data Methodology","url":"https:\/\/constella.ai\/data\/data-pedigree-methodology\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-239","name":"","url":"https:\/\/constella.ai\/data\/use-cases-api\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2506","name":"","url":"https:\/\/constella.ai\/data\/developer-portal\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-240","name":"","url":"https:\/\/constella.ai\/partner-inquiry\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-171","name":"Platform","url":"#"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-241","name":"","url":"https:\/\/constella.ai\/platform\/hunter-drp-overview\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-242","name":"","url":"https:\/\/constella.ai\/platform\/executive-protection\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-243","name":"","url":"https:\/\/constella.ai\/platform\/brand-protection\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-3005","name":"","url":"https:\/\/constella.ai\/platform\/threat-investigation\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-245","name":"","url":"https:\/\/constella.ai\/request-a-demo\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-172","name":"Solutions","url":"#"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2410","name":"","url":"https:\/\/constella.ai\/solutions\/mdr-xdr\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2411","name":"","url":"https:\/\/constella.ai\/solutions\/osint\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2412","name":"","url":"https:\/\/constella.ai\/solutions\/identity-theft-monitoring\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2413","name":"","url":"https:\/\/constella.ai\/solutions\/session-hijacking-cookies\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2414","name":"","url":"https:\/\/constella.ai\/solutions\/ransomware-prevention\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2415","name":"","url":"https:\/\/constella.ai\/solutions\/account-takeover\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-248","name":"","url":"https:\/\/constella.ai\/solutions\/law-enforcement-agencies\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-3846","name":"","url":"https:\/\/constella.ai\/solutions\/fintech\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-3881","name":"","url":"https:\/\/constella.ai\/solutions\/resellers-and-partners\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-173","name":"Resources","url":"#"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-1428","name":"Blog \/ Insights","url":"\/blog\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2133","name":"White Papers & Reports","url":"\/reports\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2801","
170name":"Datasheets","url":"\/datasheets\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2639","name":"Case Studies","url":"\/case-study\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-1456","name":"Company News","url":"\/news\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-4241","name":"Webinars","url":"\/webinars\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-2802","name":"","url":"https:\/\/constella.ai\/events\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-4181","name":"","url":"https:\/\/constella.ai\/identity-risk-intelligence-glossary\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-174","name":"Company","url":"#"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-252","name":"","url":"https:\/\/constella.ai\/about-us\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-253","name":"","url":"https:\/\/constella.ai\/careers\/"},{"@type":"SiteNavigationElement","@id":"https:\/\/constella.ai\/blog\/from-a-stolen-login-to-a-ransomware-leak-site\/#schema-nav-element-254","name":"","url":"https:\/\/constella.ai\/contact-us\/"}]},[]]}</script>
170 171<meta property="og:type" content="article" /> 172<meta property="og:url" content="https://constella.ai/blog/from-a-stolen-login-to-a-ransomware-leak-site/" /> 173<meta property="og:title" content="From a Stolen Login to a Ransomware Leak Site | Constella" /> 174<meta property="og:description" content="A ransomware disclosure and a credential package we track from an entirely separate source- a pattern our research team sees again and again." /> 175<meta property="og:image" content="https://constella.ai/wp-content/uploads/randsomware-leaks.jpg" /> 176<meta property="og:image:width" content="1365" /> 177<meta property="og:image:height" content="768" /> 178<meta property="article:published_time" content="2026-09-01T05:00:44" /> 179<meta property="article:author" content="Alberto Casares" /> 180<meta name="twitter:card" content="summary_large_image" /> 181<meta name="twitter:title" content="From a Stolen Login to a Ransomware Leak Site | Constella" /> 182<meta name="twitter:description" content="A ransomware disclosure and a credential package we track from an entirely separate source- a pattern our research team sees again and again." /> 183<meta name="twitter:image" content="https://constella.ai/wp-content/uploads/randsomware-leaks.jpg" /> 184<!-- /SEO --> 185 <style> 186 .e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload), 187 .e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload) * { 188 background-image: none !important; 189 } 190 @media screen and (max-height: 1024px) { 191 .e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload), 192 .e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload) * { 193 background-image: none !important; 194 } 195 } 196 @media screen and (max-height: 640px) { 197 .e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload), 198 .e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload) * { 199 background-image: none !important; 200 } 201 } 202 </style> 203 <link rel="icon" href="https://constella.ai/wp-content/uploads/cropped-Constella-white-favicon-32x32.png" sizes="32x32" /> 204<link rel="icon" href="https://constella.ai/wp-content/uploads/cropped-Constella-white-favicon-192x192.png" sizes="192x192" /> 205<link rel="apple-touch-icon" href="https://constella.ai/wp-content/uploads/cropped-Constella-white-favicon-180x180.png" /> 206<meta name="msapplication-TileImage" content="https://constella.ai/wp-content/uploads/cropped-Constella-white-favicon-270x270.png" /> 207<style id="wp-custom-css"> 208 209 210</style> 211</head> 212<body class="wp-singular post-template-default single single-post postid-4505 single-format-standard wp-custom-logo wp-embed-responsive wp-theme-hello-elementor hello-elementor-default elementor-default elementor-template-full-width elementor-kit-49 elementor-page-3551"> 213 214 215<!-- GTM Container placement set to automatic --> 216<!-- Google Tag Manager (noscript) --> 217 <noscript><iframe data-src="https://www.googletagmanager.com/ns.html?id=GTM-W5Z2LXW5" height="0" width="0" style="display:none;visibility:hidden" aria-hidden="true" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" class="lazyload" data-load-mode="0"></iframe></noscript> 218<!-- End Google Tag Manager (noscript) --> 219<a class="skip-link screen-reader-text" href="#content">Skip to content</a> 220 221 <header data-elementor-type="header" data-elementor-id="1509" class="elementor elementor-1509 elementor-location-header" data-elementor-post-type="elementor_library"> 222 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-af4f821 e-con-full e-flex e-con e-parent" data-id="af4f821" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic"}"> 223 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-3bfc994 e-grid e-con-full e-con e-child" data-id="3bfc994" data-element_type="container" data-e-type="container"> 224 <div class="elementor-element elementor-element-c7833fa elementor-nav-menu__align-end elementor-nav-menu--dropdown-none elementor-widget elementor-widget-nav-menu" data-id="c7833fa" data-element_type="widget" data-e-type="widget" data-settings="{"layout":"horizontal","submenu_icon":{"value":"<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-caret-down\"
224 viewBox=\"0 0 320 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M31.3 192h257.3c17.8 0 26.7 21.5 14.1 34.1L174.1 354.8c-7.8 7.8-20.5 7.8-28.3 0L17.2 226.1C4.6 213.5 13.5 192 31.3 192z\"><\/path><\/svg>","library":"fa-solid"}}" data-widget_type="nav-menu.default"> 225 <nav aria-label="Menu" class="elementor-nav-menu--main elementor-nav-menu__container elementor-nav-menu--layout-horizontal e--pointer-background e--animation-fade"> 226 <ul id="menu-1-c7833fa" class="elementor-nav-menu"><li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-463"><a href="https://app.constellaintelligence.com/static/login.html#/" class="elementor-item elementor-item-anchor">Login</a></li> 227<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-462"><a href="https://constella.ai/contact-us/" class="elementor-item">Contact Us</a></li> 228</ul> </nav> 229 <nav class="elementor-nav-menu--dropdown elementor-nav-menu__container" aria-hidden="true"> 230 <ul id="menu-2-c7833fa" class="elementor-nav-menu"><li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-463"><a href="https://app.constellaintelligence.com/static/login.html#/" class="elementor-item elementor-item-anchor" tabindex="-1">Login</a></li> 231<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-462"><a href="https://constella.ai/contact-us/" class="elementor-item" tabindex="-1">Contact Us</a></li> 232</ul> </nav> 233 </div> 234 <div class="elementor-element elementor-element-23be356 elementor-widget__width-initial elementor-widget elementor-widget-eael-advanced-search" data-id="23be356" data-element_type="widget" data-e-type="widget" data-widget_type="eael-advanced-search.default"> 235 <div class="eael-adv-search-wrapper"> 236 <div id="eael-advanced-search-widget-23be356" class="eael-advanced-search-widget"> 237 <form data-settings="{"post_per_page":"5","search_among_taxonomies":"","search_among_sku":"no","show_popular_keyword":0,"show_category":0,"show_content_image":0,"show_search_result_all_results":0,"result_on_new_tab":"no","show_product_price":"","include_current_page":"no","orderby":"default","order":"DESC","post__not_in":["2284","2730"],"current_post_id":4505,"post_type":["post","page","news","reports","case-study"]}" method="POST" name="eael-advanced-search-form-23be356" class="eael-advanced-search-form eael-advanced-search-form-style-1"> 238 <div class="eael-advanced-search-wrap"> 239 <span class="eael-adv-search-loader"></span> 240 <span class="eael-adv-search-close"><i class="fas fa-times"></i></span> 241 <span class="icon "><i class="fas fa-search"></i></span> 242 243 <input type="text" 244 placeholder="Enter Search Keyword" 245 class="eael-advanced-search" autocomplete="off" name="eael_advanced_search"> 246 </div> 247 <button class="eael-advanced-search-button">Search</button> 248 </form> 249 250 251 <div class="eael-advanced-search-result"> 252 <div class="eael-advanced-search-popular-keyword"> 253 <h4 class="eael-advanced-search-popular-keyword-text">Popular Keywords</h4> <div class="eael-popular-keyword-content"></div> 254 </div> 255 <div class="eael-advanced-search-category"> 256 <h4 class="eael-advanced-search-category-text">Categories</h4> <div class="eael-popular-category-content"></div> 257 </div> 258 <div class="eael-advanced-search-total-results-section"> 259 </div> 260 <div class="eael-advanced-search-content eael-item-style-1"> 261 </div> 262 <div class="eael-advanced-search-not-found"> 263 <p>No Record Found</p></div> 264 <div class="eael-advanced-search-load-more">
265 <a class="eael-advanced-search-load-more-button" 266 href="#">View All Results</a> 267 </div> 268 </div> 269 270 </div> 271 </div> 272 273 </div> 274 </div> 275 </div> 276 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-2be5560 e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-parent" data-id="2be5560" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic","sticky":"top","sticky_on":["desktop","tablet"],"sticky_offset":0,"sticky_effects_offset":0,"sticky_anchor_link_offset":0}"> 277 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-a2f9c6f e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child" data-id="a2f9c6f" data-element_type="container" data-e-type="container"> 278 <div class="elementor-element elementor-element-c570d96 elementor-widget elementor-widget-theme-site-logo elementor-widget-image" data-id="c570d96" data-element_type="widget" data-e-type="widget" data-widget_type="theme-site-logo.default"> 279 <a href="https://constella.ai"> 280 <img width="385" height="72" data-src="https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white.png" class="attachment-full size-full wp-image-16 lazyload" alt="Constella" data-srcset="https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white.png 385w, https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white-300x56.png 300w" data-sizes="(max-width: 385px) 100vw, 385px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 385px; --smush-placeholder-aspect-ratio: 385/72;" /> </a> 281 </div> 282 </div> 283 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-460a827 e-con-full e-flex e-con e-child" data-id="460a827" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic"}"> 284 <div class="elementor-element elementor-element-38aa1fc eael-advanced-menu-hamburger-align-center eael-advanced-menu--stretch elementor-widget__width-initial eael_advanced_menu_hamburger_disable_selected_menu_hide eael-hamburger--tablet elementor-widget elementor-widget-eael-advanced-menu" data-id="38aa1fc" data-element_type="widget" data-e-type="widget" data-widget_type="eael-advanced-menu.skin-six"> 285 <style> 286 @media screen and (max-width: 1300px) { 287 .eael-hamburger--tablet { 288 .eael-advanced-menu-horizontal, 289 .eael-advanced-menu-vertical { 290 display: none; 291 } 292 } 293 .eael-hamburger--tablet { 294 .eael-advanced-menu-container .eael-advanced-menu-toggle { 295 display: block; 296 } 297 } 298 } 299 </style> <div data-hamburger-icon="<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:serif="http://www.serif.com/" width="100%" height="100%" viewBox="0 0 278 29" xml:space="preserve" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:1.5;"><path d="M51.197,16.89c-0.206,1.467 -0.81,2.616 -1.806,3.443c-0.998,0.829 -2.191,1.241 -3.582,1.241c-1.806,0 -3.216,-0.629 -4.232,-1.888c-1.016,-1.261 -1.522,-3.021 -1.522,-5.276c0,-2.239 0.51,-3.992 1.536,-5.262c1.025,-1.27 2.431,-1.902 4.219,-1.902c1.334,0 2.458,0.341 3.372,1.028c0.911,0.687 1.538,1.689 1.875,3.003l3.866,0c-0.414,-2.387 -1.449,-4.212 -3.104,-5.473c-1.657,-1.259 -3.658,-1.888 -6.009,-1.888c-2.934,0 -5.285,0.941 -7.055,2.82c-1.785,1.902 -2.678,4.459 -2.678,7.675c0,3.195 0.904,5.745 2.708,7.645c1.785,1.9 4.127,2.848 7.025,2.848c2.408,0 4.477,-0.696 6.205,-2.088c1.749,-1.389 2.747,-3.365 2.992,-5.924l-3.809,0Z" style="fill:#fff;fill-rule:nonzero;"><
299/path><path d="M69.448,11.616c-1.355,-1.373 -3.14,-2.06 -5.359,-2.06c-2.223,0 -4.006,0.696 -5.363,2.088c-1.371,1.373 -2.058,3.216 -2.058,5.53c0,2.312 0.687,4.157 2.058,5.53c1.357,1.392 3.14,2.088 5.363,2.088c2.218,0 4.003,-0.696 5.359,-2.088c1.353,-1.394 2.03,-3.237 2.03,-5.53c0,-2.332 -0.678,-4.184 -2.03,-5.558m-2.58,9.014c-0.668,0.817 -1.595,1.227 -2.779,1.227c-1.186,0 -2.113,-0.405 -2.781,-1.215c-0.666,-0.808 -1,-1.964 -1,-3.468c0,-1.504 0.334,-2.662 1,-3.47c0.668,-0.808 1.595,-1.215 2.781,-1.215c1.183,0 2.11,0.412 2.779,1.229c0.668,0.817 1.003,1.971 1.003,3.456c0,1.486 -0.334,2.637 -1.003,3.456" style="fill:#fff;fill-rule:nonzero;"></path><path d="M85.571,10.924c-0.913,-0.911 -2.156,-1.369 -3.738,-1.369c-1.918,0 -3.431,0.81 -4.541,2.426l0,-2.088l-3.443,0l0,14.558l3.557,0l0,-8.153c0,-1.147 0.314,-2.044 0.943,-2.694c0.632,-0.648 1.396,-0.973 2.298,-0.973c1.824,0 2.738,0.92 2.738,2.765l0,9.055l3.555,0l0,-9.65c0,-1.673 -0.456,-2.967 -1.369,-3.878" style="fill:#fff;fill-rule:nonzero;"><
299/path><path d="M100.945,17.371c-0.799,-0.696 -2.083,-1.204 -3.85,-1.524l-1.833,-0.282c-0.865,-0.151 -1.486,-0.362 -1.861,-0.634c-0.378,-0.272 -0.565,-0.655 -0.565,-1.142c0,-1.128 0.847,-1.694 2.538,-1.694c0.998,0 1.749,0.183 2.257,0.552c0.508,0.364 0.781,0.982 0.819,1.847l3.356,0c-0.133,-3.292 -2.275,-4.94 -6.432,-4.94c-1.918,0 -3.404,0.391 -4.457,1.172c-1.053,0.783 -1.582,1.859 -1.582,3.23c0,2.41 1.591,3.875 4.77,4.402l1.664,0.284c1.074,0.188 1.815,0.421 2.227,0.705c0.414,0.282 0.62,0.684 0.62,1.213c0,1.165 -0.957,1.749 -2.875,1.749c-1.074,0 -1.859,-0.19 -2.355,-0.565c-0.501,-0.375 -0.797,-1.014 -0.89,-1.918l-3.47,0c0.188,3.349 2.406,5.022 6.659,5.022c2.049,0 3.639,-0.396 4.766,-1.183c1.131,-0.792 1.694,-1.92 1.694,-3.388c0,-1.241 -0.398,-2.209 -1.199,-2.905" style="fill:#fff;fill-rule:nonzero;"></path><path d="M111.538,12.603l0,-2.708l-2.877,0l0,-4.232l-3.525,0l0,4.232l-2.259,0l0,2.708l2.259,0l0,8.238c0,1.298 0.359,2.243 1.085,2.834c0.726,0.595 1.877,0.89 3.456,0.89c0.472,0 1.092,-0.039 1.861,-0.114l0,-2.708l-1.213,0c-0.6,0 -1.03,-0.092 -1.284,-0.279c-0.252,-0.19 -0.38,-0.52 -0.38,-0.991l0,-7.87l2.877,0Z" style="fill:#fff;fill-rule:nonzero;"><
299/path><path d="M127.225,17.238c0,-2.351 -0.65,-4.251 -1.948,-5.7c-1.298,-1.449 -3.047,-2.172 -5.249,-2.172c-2.142,0 -3.882,0.696 -5.217,2.088c-1.316,1.394 -1.975,3.234 -1.975,5.53c0,2.294 0.666,4.326 2.003,5.72c1.337,1.392 3.083,2.088 5.246,2.088c1.733,0 3.198,-0.439 4.402,-1.314c1.165,-0.847 1.943,-1.982 2.332,-3.404l-3.438,0c-0.613,1.302 -1.703,1.953 -3.266,1.953c-1.092,0 -1.959,-0.316 -2.609,-0.945c-0.65,-0.629 -1.041,-1.946 -1.172,-3.186l10.891,0l0,-0.657Zm-10.861,-1.637c0.336,-2.314 1.55,-3.47 3.637,-3.47c1.019,0 1.845,0.311 2.486,0.932c0.636,0.62 1.032,1.467 1.183,2.538l-7.306,0Z" style="fill:#fff;fill-rule:nonzero;"></path><rect x="129.65" y="4.366" width="3.555" height="20.086" style="fill:#fff;"></rect><rect x="136.222" y="4.366" width="3.555" height="20.086" style="fill:#fff;"></rect><path d="M155.293,21.686l0,-7.757c0,-2.916 -2.021,-4.374 -6.066,-4.374c-4.155,0 -6.338,1.657 -6.544,4.967l3.5,0c0.073,-0.847 0.336,-1.444 0.79,-1.792c0.451,-0.348 1.193,-0.522 2.227,-0.522c0.959,0 1.641,0.146 2.046,0.437c0.403,0.293 0.607,0.748 0.607,1.369c0,0.508 -0.16,0.888 -0.481,1.142c-0.32,0.254 -0.847,0.428 -1.579,0.522l-2.2,0.197c-3.724,0.375 -5.585,1.891 -5.585,4.544c0,1.371 0.474,2.445 1.421,3.216c0.952,0.769 2.225,1.156 3.825,1.156c2.142,0 3.704,-0.705 4.683,-2.115c0.094,0.881 0.224,1.476 0.394,1.776l3.555,0c-0.396,-0.563 -0.593,-1.486 -0.593,-2.765m-3.44,-2.989c0,1.147 -0.35,2.028 -1.044,2.639c-0.696,0.611 -1.6,0.916 -2.708,0.916c-0.792,0 -1.396,-0.174 -1.822,-0.522c-0.421,-0.348 -0.634,-0.833 -0.634,-1.454c0,-0.62 0.204,-1.094 0.607,-1.424c0.405,-0.33 1.078,-0.552 2.019,-0.664l1.918,-0.224c0.769,-0.094 1.325,-0.291 1.664,-0.593l0,1.325Z" style="fill:#fff;fill-rule:nonzero;"><
299/path><path d="M14.299,3.52c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,-0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M28.817,3.52c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,-0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M7.041,10.779c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M14.299,18.037c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.943 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.577 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M28.817,18.037c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.943 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.577 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"><
299/path><path d="M7.041,25.296c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M21.558,25.296c0,1.943 -1.575,3.52 -3.52,3.52c-1.946,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.575,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M21.558,10.779c0,1.946 -1.575,3.52 -3.52,3.52c-1.946,0 -3.52,-1.575 -3.52,-3.52c0,-1.946 1.575,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M247.631,4.746l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"></path><path d="M247.631,14.559l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"></path><path d="M247.631,24.371l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"><
299/path></svg>" data-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" data-dropdown-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" class="eael-advanced-menu-container eael-advanced-menu-align-right eael-advanced-menu-dropdown-align-left" data-hamburger-breakpoints="{"mobile":"Mobile Portrait (> 767px)","tablet":"Tablet Portrait (> 1300px)","desktop":"Desktop (> 2400px)","none":"None"}" data-hamburger-device="tablet"> 300 <ul id="menu-primary-menu" class="eael-advanced-menu eael-advanced-menu-dropdown-animate-to-top eael-advanced-menu-indicator eael-hamburger-center eael-advanced-menu-horizontal"><li id="menu-item-170" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-170"><a href="#">Data & API</a> 301<ul class="sub-menu"> 302 <li id="menu-item-237" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-237"><a href="https://constella.ai/data/intelligence-api/">Intelligence API</a></li> 303 <li id="menu-item-238" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-238"><a href="https://constella.ai/data/data-pedigree-methodology/">Data Methodology</a></li> 304 <li id="menu-item-239" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-239"><a href="https://constella.ai/data/use-cases-api/">Use Cases (API)</a></li> 305 <li id="menu-item-2506" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2506"><a href="https://constella.ai/data/developer-portal/">Developer Portal</a></li> 306 <li id="menu-item-240" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-240"><a href="https://constella.ai/partner-inquiry/">Partner Inquiry</a></li> 307</ul> 308</li> 309<li id="menu-item-171" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-171"><a href="#">Platform</a> 310<ul class="sub-menu"> 311 <li id="menu-item-241" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-241"><a href="https://constella.ai/platform/hunter-drp-overview/">Hunter+ DRP Overview</a></li> 312 <li id="menu-item-242" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-242"><a href="https://constella.ai/platform/executive-protection/">Executive Protection</a></li> 313 <li id="menu-item-243" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-243"><a href="https://constella.ai/platform/brand-protection/">Brand Protection</a></li> 314 <li id="menu-item-3005" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3005"><a href="https://constella.ai/platform/threat-investigation/">Threat Investigation</a></li> 315 <li id="menu-item-245" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-245"><a href="https://constella.ai/request-a-demo/">Request a Demo</a></li> 316</ul> 317</li> 318<li id="menu-item-172" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-172"><a href="#">Solutions</a> 319<ul class="sub-menu"> 320 <li id="menu-item-2410" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2410"><a href="https://constella.ai/solutions/mdr-xdr/">MDR/XDR</a></li> 321 <li id="menu-item-2411" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2411"><a href="https://constella.ai/solutions/osint/">OSINT</a></li> 322 <li id="menu-item-2412" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2412"><a href="https://constella.ai/solutions/identity-theft-monitoring/">Identity Theft Monitoring</a></li> 323 <li id="menu-item-2413" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2413"><a href="https://constella.ai/solutions/session-hijacking-cookies/">Session Hijacking (Cookies)</a></li> 324 <li id="menu-item-2414" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2414"><a href="https://constella.ai/solutions/ransomware-prevention/">Ransomware Prevention</a></li> 325 <li id="menu-item-2415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2415"><a href="https://constella.ai/solutions/account-takeover/">Account Takeover</a></li> 326 <li id="menu-item-248" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-248"><a href="https://constella.ai/solutions/law-enforcement-agencies/">Law Enforcement Agencies</a></li> 327 <li id="menu-item-3846" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3846"><a href="https://constella.ai/solutions/fintech/">FinTech</a></li> 328 <li id="menu-item-3881" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3881"><a href="https://constella.ai/solutions/resellers-and-partners/">Resellers and Partners</a></li> 329</ul> 330</li> 331<li id="menu-item-173" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-173"><a href="#">Resources</a> 332<ul class="sub-menu"> 333 <li id="menu-item-1428" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-1428"><a href="/blog/">Blog / Insights</a></li> 334 <li id="menu-item-2133" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2133"><a href="/reports/">White Papers & Reports</a></li> 335 <li id="menu-item-2801" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2801"><a href="/datasheets/">Datasheets</a></li> 336 <li id="menu-item-2639" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2639"><a href="/case-study/">Case Studies</a></li> 337 <li id="menu-item-1456" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-1456"><a href="/news/">Company News</a></li> 338 <li id="menu-item-4241" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-4241"><a href="/webinars/">Webinars</a></li> 339 <li id="menu-item-2802" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2802"><a href="https://constella.ai/events/">Events</a></li> 340 <li id="menu-item-4181" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-4181"><a href="https://constella.ai/identity-risk-intelligence-glossary/">Glossary</a></li> 341</ul> 342</li> 343<li id="menu-item-174" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-174"><a href="#">Company</a> 344<ul class="sub-menu"> 345 <li id="menu-item-252" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-252"><a href="https://constella.ai/about-us/">About Us</a></li> 346 <li id="menu-item-253" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-253"><a href="https://constella.ai/careers/">Careers</a></li> 347 <li id="menu-item-254" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-254"><a href="https://constella.ai/contact-us/">Contact Us</a></li> 348</ul> 349</li> 350</ul> <button class="eael-advanced-menu-toggle" aria-label="Essential Addons Toggle Menu"> 351 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:serif="http://www.serif.com/" width="100%" height="100%" viewB
351ox="0 0 278 29" xml:space="preserve" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:1.5;"><path d="M51.197,16.89c-0.206,1.467 -0.81,2.616 -1.806,3.443c-0.998,0.829 -2.191,1.241 -3.582,1.241c-1.806,0 -3.216,-0.629 -4.232,-1.888c-1.016,-1.261 -1.522,-3.021 -1.522,-5.276c0,-2.239 0.51,-3.992 1.536,-5.262c1.025,-1.27 2.431,-1.902 4.219,-1.902c1.334,0 2.458,0.341 3.372,1.028c0.911,0.687 1.538,1.689 1.875,3.003l3.866,0c-0.414,-2.387 -1.449,-4.212 -3.104,-5.473c-1.657,-1.259 -3.658,-1.888 -6.009,-1.888c-2.934,0 -5.285,0.941 -7.055,2.82c-1.785,1.902 -2.678,4.459 -2.678,7.675c0,3.195 0.904,5.745 2.708,7.645c1.785,1.9 4.127,2.848 7.025,2.848c2.408,0 4.477,-0.696 6.205,-2.088c1.749,-1.389 2.747,-3.365 2.992,-5.924l-3.809,0Z" style="fill:#fff;fill-rule:nonzero;"></path><path d="M69.448,11.616c-1.355,-1.373 -3.14,-2.06 -5.359,-2.06c-2.223,0 -4.006,0.696 -5.363,2.088c-1.371,1.373 -2.058,3.216 -2.058,5.53c0,2.312 0.687,4.157 2.058,5.53c1.357,1.392 3.14,2.088 5.363,2.088c2.218,0 4.003,-0.696 5.359,-2.088c1.353,-1.394 2.03,-3.237 2.03,-5.53c0,-2.332 -0.678,-4.184 -2.03,-5.558m-2.58,9.014c-0.668,0.817 -1.595,1.227 -2.779,1.227c-1.186,0 -2.113,-0.405 -2.781,-1.215c-0.666,-0.808 -1,-1.964 -1,-3.468c0,-1.504 0.334,-2.662 1,-3.47c0.668,-0.808 1.595,-1.215 2.781,-1.215c1.183,0 2.11,0.412 2.779,1.229c0.668,0.817 1.003,1.971 1.003,3.456c0,1.486 -0.334,2.637 -1.003,3.456" style="fill:#fff;fill-rule:nonzero;"></path><path d="M85.571,10.924c-0.913,-0.911 -2.156,-1.369 -3.738,-1.369c-1.918,0 -3.431,0.81 -4.541,2.426l0,-2.088l-3.443,0l0,14.558l3.557,0l0,-8.153c0,-1.147 0.314,-2.044 0.943,-2.694c0.632,-0.648 1.396,-0.973 2.298,-0.973c1.824,0 2.738,0.92 2.738,2.765l0,9.055l3.555,0l0,-9.65c0,-1.673 -0.456,-2.967 -1.369,-3.878" style="fill:#fff;fill-rule:nonzero;"></path><path d="M100.945,17.371c-0.799,-0.696 -2.083,-1.204 -3.85,-1.524l-1.833,-0.282c-0.865,-0.151 -1.486,-0.362 -1.861,-0.634c-0.378,-0.272 -0.565,-0.655 -0.565,-1.142c0,-1.128 0.847,-1.694 2.538,-1.694c0.998,0 1.749,0.183 2.257,0.552c0.508,0.364 0.781,0.982 0.819,1.847l3.356,0c-0.133,-3.292 -2.275,-4.94 -6.432,-4.94c-1.918,0 -3.404,0.391 -4.457,1.172c-1.053,0.783 -1.582,1.859 -1.582,3.23c0,2.41 1.591,3.875 4.77,4.402l1.664,0.284c1.074,0.188 1.815,0.421 2.227,0.705c0.414,0.282 0.62,0.684 0.62,1.213c0,1.165 -0.957,1.749 -2.875,1.749c-1.074,0 -1.859,-0.19 -2.355,-0.565c-0.501,-0.375 -0.797,-1.014 -0.89,-1.918l-3.47,0c0.188,3.349 2.406,5.022 6.659,5.022c2.049,0 3.639,-0.396 4.766,-1.183c1.131,-0.792 1.694,-1.92 1.694,-3.388c0,-1.241 -0.398,-2.209 -1.199,-2.905" style="fill:#fff;fill-rule:nonzero;"></path><path d="M111.538,12.603l0,-2.708l-2.877,0l0,-4.232l-3.525,0l0,4.232l-2.259,0l0,2.708l2.259,0l0,8.238c0,1.298 0.359,2.243 1.085,2.834c0.726,0.595 1.877,0.89 3.456,0.89c0.472,0 1.092,-0.039 1.861,-0.114l0,-2.708l-1.213,0c-0.6,0 -1.03,-0.092 -1.284,-0.279c-0.252,-0.19 -0.38,-0.52 -0.38,-0.991l0,-7.87l2.877,0Z" style="fill:#fff;fill-rule:nonzero;"></path><path d="M127.225,17.238c0,-2.351 -0.65,-4.251 -1.948,-5.7c-1.298,-1.449 -3.047,-2.172 -5.249,-2.172c-2.142,0 -3.882,0.696 -5.217,2.088c-1.316,1.394 -1.975,3.234 -1.975,5.53c0,2.294 0.666,4.326 2.003,5.72c1.337,1.392 3.083,2.088 5.246,2.088c1.733,0 3.198,-0.439 4.402,-1.314c1.165,-0.847 1.943,-1.982 2.332,-3.404l-3.438,0c-0.613,1.302 -1.703,1.953 -3.266,1.953c-1.092,0 -1.959,-0.316 -2.609,-0.945c-0.65,-0.629 -1.041,-1.946 -1.172,-3.186l10.891,0l0,-0.657Zm-10.861,-1.637c0.336,-2.314 1.55,-3.47 3.637,-3.47c1.019,0 1.845,0.311 2.486,0.932c0.636,0.62 1.032,1.467 1.183,2.538l-7.306,0Z" style="fill:#fff;fill-rule:nonzero;"></path><rect x="129.65" y="4.366" width="3.555" height="20.086" style="fill:#fff;"></rect><rect x="136.222" y="4.366" width="3.555" height="20.086" style="fill:#fff;"></rect><path d="M155.293,21.686l0,-7.757c0,-2.916 -2.021,-4.374 -6.066,-4.374c-4.155,0 -6.338,1.657 -6.544,4.967l3.5,0c0.073,-0.847 0.336,-1.444 0.79,-1.792c0.451,-0.348 1.193,-0.522 2.227,-0.522c0.959,0 1.641,0.146 2.046,0.437c0.403,0.293 0.607,0.748 0.607,1.369c0,0.508 -0.16,0.888 -0.481,1.142c-0.32,0.254 -0.847,0.428 -1.579,0.522l-2.2,0.197c-3.724,0.375 -5.585,1.891 -5.585,4.544c0,1.371 0.474,2.445 1.421,3.216c0.952,0.769 2.225,1.156 3.825,1.156c2.142,0 3.704,-0.705 4.683,-2.115c0.094,0.881 0.224,1.476 0.394,1.776l3.555,0c-0.396,-0.563 -0.593,-1.486 -0.593,-2.765m-3.44,-2.989c0,1.147 -0.35,2.028 -1.044,2.639c-0.696,0.611 -1.6,0.916 -2.708,0.916c-0.792,0 -1.396,-0.174 -1.822,-0.522c-0.421,-0.348 -0.634,-0.833 -0.634,-1.454c0,-0.62 0.204,-1.
351094 0.607,-1.424c0.405,-0.33 1.078,-0.552 2.019,-0.664l1.918,-0.224c0.769,-0.094 1.325,-0.291 1.664,-0.593l0,1.325Z" style="fill:#fff;fill-rule:nonzero;"></path><path d="M14.299,3.52c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,-0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M28.817,3.52c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,-0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M7.041,10.779c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M14.299,18.037c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.943 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.577 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M28.817,18.037c0,1.946 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.575 -3.52,-3.52c0,-1.943 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.577 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M7.041,25.296c0,1.943 -1.575,3.52 -3.52,3.52c-1.943,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.577,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M21.558,25.296c0,1.943 -1.575,3.52 -3.52,3.52c-1.946,0 -3.52,-1.577 -3.52,-3.52c0,-1.946 1.575,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M21.558,10.779c0,1.946 -1.575,3.52 -3.52,3.52c-1.946,0 -3.52,-1.575 -3.52,-3.52c0,-1.946 1.575,-3.52 3.52,-3.52c1.946,0 3.52,1.575 3.52,3.52" style="fill:#fff;fill-rule:nonzero;"></path><path d="M247.631,4.746l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"></path><path d="M247.631,14.559l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"></path><path d="M247.631,24.371l28,0" style="fill:none;stroke:#fff;stroke-width:2.92px;"></path></svg> </button> 352 </div> 353 </div> 354 </div> 355 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-f8cd03f e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child" data-id="f8cd03f" data-element_type="container" data-e-type="container"> 356 <div class="elementor-element elementor-element-8bd5ba8 elementor-widget__width-auto elementor-hidden-mobile elementor-align-right elementor-widget elementor-widget-button" data-id="8bd5ba8" data-element_type="widget" data-e-type="widget" data-widget_type="button.default"> 357 <a class="elementor-button elementor-button-link elementor-size-sm" href="https://threatmap.constella.ai" target="_blank"> 358 <span class="elementor-button-content-wrapper"> 359 <span class="elementor-button-text">Free Exposure Check</span> 360 </span> 361 </a> 362 </div> 363 </div> 364 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-6ae6460 e-con-full e-flex e-con e-child" data-id="6ae6460" data-element_type="container" data-e-type="container"> 365 <div class="elementor-element elementor-element-da9cf51 elementor-widget__width-auto elementor-hidden-mobile elementor-align-right elementor-hidden-tablet elementor-widget elementor-widget-button" data-id="da9cf51" data-element_type="widget" data-e-type="widget" data-widget_type="button.default"> 366 <a class="elementor-button elementor-button-link elementor-size-sm" href="/request-a-demo/"> 367 <span class="elementor-button-content-wrapper"> 368 <span class="elementor-button-text">Request a Demo</span> 369 </span> 370 </a> 371 </div> 372 </div> 373 </div> 374 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-64475ff e-con-full elementor-hidden-desktop e-flex e-con e-parent" data-id="64475ff" data-element_type="container" data-e-type="container"> 375 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-844de59 e-con-full e-flex e-con e-child" data-id="844de59" data-element_type="container" data-e-type="container"> 376 <div class="elementor-element elementor-element-c221a09 elementor-widget elementor-widget-theme-site-logo elementor-widget-image" data-id="c221a09" data-element_type="widget" data-e-type="widget" data-widget_type="theme-site-logo.default"> 377 <a href="https://constella.ai"> 378 <img width="385" height="72" data-src="https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white.png" class="attachment-full size-full wp-image-16 lazyload" alt="Constella" data-srcset="https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white.png 385w, https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white-300x56.png 300w" data-sizes="(max-width: 385px) 100v
378w, 385px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 385px; --smush-placeholder-aspect-ratio: 385/72;" /> </a> 379 </div> 380 </div> 381 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-009ccfc e-con-full e-flex e-con e-child" data-id="009ccfc" data-element_type="container" data-e-type="container"> 382 <div class="elementor-element elementor-element-29b1247 eael-advanced-menu-hamburger-align-center elementor-widget__width-inherit eael_advanced_menu_hamburger_disable_selected_menu_hide elementor-widget-tablet__width-initial eael-hamburger--tablet elementor-widget elementor-widget-eael-advanced-menu" data-id="29b1247" data-element_type="widget" data-e-type="widget" data-widget_type="eael-advanced-menu.skin-six"> 383 <style> 384 @media screen and (max-width: 1300px) { 385 .eael-hamburger--tablet { 386 .eael-advanced-menu-horizontal, 387 .eael-advanced-menu-vertical { 388 display: none; 389 } 390 } 391 .eael-hamburger--tablet { 392 .eael-advanced-menu-container .eael-advanced-menu-toggle { 393 display: block; 394 } 395 } 396 } 397 </style> <div data-hamburger-icon="<svg aria-hidden="true" class="e-font-icon-svg e-fas-bars" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M16 132h416c8.837 0 16-7.163 16-16V76c0-8.837-7.163-16-16-16H16C7.163 60 0 67.163 0 76v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16z"><
397/path></svg>" data-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" data-dropdown-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" class="eael-advanced-menu-container eael-advanced-menu-align-left eael-advanced-menu-dropdown-align-left" data-hamburger-breakpoints="{"mobile":"Mobile Portrait (> 767px)","tablet":"Tablet Portrait (> 1300px)","desktop":"Desktop (> 2400px)","none":"None"}" data-hamburger-device="tablet"> 398 <ul id="menu-mobile" class="eael-advanced-menu eael-advanced-menu-dropdown-animate-to-top eael-advanced-menu-indicator eael-hamburger-left eael-advanced-menu-horizontal"><li id="menu-item-1837" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-home menu-item-1837"><a href="https://constella.ai/">Home</a></li> 399<li id="menu-item-1857" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-1857"><a href="#">Data & API</a> 400<ul class="sub-menu"> 401 <li id="menu-item-1859" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1859"><a href="https://constella.ai/data/intelligence-api/">Intelligence API</a></li> 402 <li id="menu-item-1858" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1858"><a href="https://constella.ai/data/data-pedigree-methodology/">Data Methodology</a></li> 403 <li id="menu-item-1860" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1860"><a href="https://constella.ai/data/use-cases-api/">Use Cases (API)</a></li> 404 <li id="menu-item-2508" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2508"><a href="https://constella.ai/data/developer-portal/">Developer Portal</a></li> 405 <li id="menu-item-1861" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1861"><a href="https://constella.ai/partner-inquiry/">Partner Inquiry</a></li> 406</ul> 407</li> 408<li id="menu-item-2481" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-2481"><a href="#">Platform</a> 409<ul class="sub-menu"> 410 <li id="menu-item-2492" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2492"><a href="https://constella.ai/platform/hunter-drp-overview/">Hunter+ DRP Overview</a></li> 411 <li id="menu-item-2493" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2493"><a href="https://constella.ai/platform/executive-protection/">Executive Protection</a></li> 412 <li id="menu-item-2494" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2494"><a href="https://constella.ai/platform/brand-protection/">Brand Protection</a></li> 413 <li id="menu-item-3007" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3007"><a href="https://constella.ai/platform/threat-investigation/">Threat Investigation</a></li> 414 <li id="menu-item-2496" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2496"><a href="https://constella.ai/request-a-demo/">Request a Demo</a></li> 415</ul> 416</li> 417<li id="menu-item-2482" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-2482"><a href="#">Solutions</a> 418<ul class="sub-menu"> 419 <li id="menu-item-2483" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2483"><a href="https://constella.ai/solutions/mdr-xdr/">MDR/XDR</a></li> 420 <li id="menu-item-2484" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2484"><a href="https://constella.ai/solutions/osint/">OSINT</a></li> 421 <li id="menu-item-2485" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2485"><a href="https://constella.ai/solutions/identity-theft-monitoring/">Identity Theft Monitoring</a></li> 422 <li id="menu-item-2486" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2486"><a href="https://constella.ai/solutions/session-hijacking-cookies/">Session Hijacking (Cookies)</a></li> 423 <li id="menu-item-2487" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2487"><a href="https://constella.ai/solutions/ransomware-prevention/">Ransomware Prevention</a></li> 424 <li id="menu-item-2488" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2488"><a href="https://constella.ai/solutions/account-takeover/">Account Takeover</a></li> 425 <li id="menu-item-2490" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2490"><a href="https://constella.ai/solutions/law-enforcement-agencies/">Law Enforcement Agencies</a></li> 426 <li id="menu-item-3847" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3847"><a href="https://constella.ai/solutions/fintech/">FinTech</a></li> 427 <li id="menu-item-3882" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3882"><a href="https://constella.ai/solutions/resellers-and-partners/">Resellers and Partners</a></li> 428</ul> 429</li> 430<li id="menu-item-1838" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-1838"><a href="#">Resources</a> 431<ul class="sub-menu"> 432 <li id="menu-item-2641" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2641"><a href="/blog/">Blog / Insights</a></li> 433 <li id="menu-item-2642" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2642"><a href="/reports/">White Papers & Reports</a></li> 434 <li id="menu-item-2803" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2803"><a href="/datasheets/">Datasheets</a></li> 435 <li id="menu-item-2644" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2644"><a href="/case-study/">Case Studies</a></li> 436 <li id="menu-item-2643" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2643"><a href="/news/">Company News</a></li> 437 <li id="menu-item-4243" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-4243"><a href="/webinars/">Webinars</a></li>
438 <li id="menu-item-3529" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3529"><a href="https://constella.ai/events/">Events</a></li> 439 <li id="menu-item-4252" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-4252"><a href="https://constella.ai/identity-risk-intelligence-glossary/">Glossary</a></li> 440</ul> 441</li> 442<li id="menu-item-1842" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-1842"><a href="#">Company</a> 443<ul class="sub-menu"> 444 <li id="menu-item-1846" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1846"><a href="https://constella.ai/about-us/">About Us</a></li> 445 <li id="menu-item-1845" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1845"><a href="https://constella.ai/careers/">Careers</a></li> 446 <li id="menu-item-1844" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1844"><a href="https://constella.ai/contact-us/">Contact Us</a></li> 447</ul> 448</li> 449<li id="menu-item-3463" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3463"><a href="https://threatmap.constella.ai">Free Exposure Check</a></li> 450<li id="menu-item-1862" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-1862"><a href="https://constella.ai/request-a-demo/">Request a Demo</a></li> 451</ul> <button class="eael-advanced-menu-toggle" aria-label="Essential Addons Toggle Menu"> 452 <svg aria-hidden="true" class="e-font-icon-svg e-fas-bars" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M16 132h416c8.837 0 16-7.163 16-16V76c0-8.837-7.163-16-16-16H16C7.163 60 0 67.163 0 76v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16z"></path></svg> </button> 453 </div> 454 </div> 455 </div> 456 </div> 457 </header> 458 <div data-elementor-type="single-post" data-elementor-id="3551" class="elementor elementor-3551 elementor-location-single post-4505 post type-post status-publish format-standard has-post-thumbnail hentry category-insights category-investigations-osint tag-credentialcompilations tag-infostealers tag-initialaccessbrokers tag-ransomware tag-thirdpartyrisk" data-elementor-post-type="elementor_library"> 459 <section data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-section elementor-top-section elementor-element elementor-element-3ea3ad64 elementor-section-content-middle elementor-reverse-mobile elementor-section-boxed elementor-section-height-default elementor-section-height-default" data-id="3ea3ad64" data-element_type="section" data-e-type="section"> 460 <div class="elementor-container elementor-column-gap-no"> 461 <div class="elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a7e65ec" data-id="2a7e65ec" data-element_type="column" data-e-type="column" data-settings="{"background_background":"classic"}"> 462 <div class="elementor-widget-wrap elementor-element-populated"> 463 <div class="elementor-background-overlay"></div> 464 <div class="elementor-element elementor-element-8c96d17 elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading" data-id="8c96d17" data-element_type="widget" data-e-type="widget" data-widget_type="theme-post-title.default"> 465 <h1 class="elementor-heading-title elementor-size-default">From a Stolen Login to a Ransomware Leak Site: What Our Telemetry Shows About the Path Threat Actors Take</h1> </div> 466 </div> 467 </div> 468 </div> 469 </section> 470 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-336ef6a5 e-flex e-con-boxed e-con e-parent" data-id="336ef6a5" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic"}"> 471 <div class="e-con-inner"> 472 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-7b9e9f4 e-con-full e-flex e-con e-child" data-id="7b9e9f4" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic"}"> 473 <div class="elementor-element elementor-element-61ad627b elementor-align-left elementor-widget elementor-widget-post-info" data-id="61ad627b" data-element_type="widget" data-e-type="widget" data-widget_type="post-info.default"> 474 <ul class="elementor-inline-items elementor-icon-list-items elementor-post-info"> 475 <li class="elementor-icon-list-item elementor-repeater-item-fde9fb9 elementor-inline-item" itemprop="datePublished"> 476 <span class="elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date"> 477 <time>September 1, 2026</time> </span> 478 </li> 479 <li class="elementor-icon-list-item elementor-repeater-item-f7bd4a7 elementor-inline-item" itemprop="author"> 480 <span class="elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-author"> 481 Alberto Casares </span> 482 </li> 483 </ul> 484 </div> 485 <div class="elementor-element elementor-element-339e8bac elementor-widget elementor-widget-theme-post-content" data-id="339e8bac" data-element_type="widget" data-e-type="widget" data-widget_type="theme-post-content.default"> 486 <p><em>A ransomware disclosure and a credential package we track from an entirely separate source, read side by side, illustrate a pattern our research team sees again and again: the quiet theft of a single login can be the first domino in a breach that ends, months later, on a dark web leak site.</em></p> 487<p><em>Reading time · 11 min | Victim · Fairlife (The Coca-Cola Company) | Threat actor · Anubis RaaS</em></p> 488<p><strong>A NOTE ON THIS POST</strong></p> 489<p>Fairlife and its parent, The Coca-Cola Company, are named here because the ransomware incident and the leak site disclosure referencing them are already public, Coca-Cola confirmed the incident itself and the threat actor named the victim on its own site. Everything else below that is not already public, the vendor, the individual whose credentials were exposed, and every n
489amed employee visible in the leak, has been anonymized, redacted or replaced with a placeholder, including in the screenshots. Nothing here should be read as a confirmed, forensically established account of exactly how this organization was compromised. We pair the public disclosure with a separate credential package our research team observed through an unrelated channel as a realistic, illustrative example of a pattern a threat actor could exploit, the kind of pattern Constella’s platform is built to surface before it reaches this stage.</p> 490<h2>The Incident</h2> 491<p><em>What the leak site actually showed</em></p> 492<p>In mid 2026, a ransomware group operating under the name Anubis added Fairlife, the dairy brand owned by The Coca-Cola Company, to its dark web extortion portal, a fact Coca-Cola itself has publicly confirmed. The group claimed to have exfiltrated close to a terabyte of internal data before triggering its encryption routine, and stated it had also run its optional wipe mode against part of the victim’s virtualization infrastructure, permanently destroying files rather than only encrypting them. That destructive option is one of the traits that sets Anubis apart from most double extortion crews.</p> 493<p><em><img fetchpriority="high" fetchpriority="high" decoding="async" class="alignnone wp-image-4506 " src="https://constella.ai/wp-content/uploads/01-anubis-leak-site-disclosure.png" alt="Anonymized leak site title page" width="635" height="490" srcset="https://constella.ai/wp-content/uploads/01-anubis-leak-site-disclosure.png 1000w, https://constella.ai/wp-content/uploads/01-anubis-leak-site-disclosure-300x232.png 300w, https://constella.ai/wp-content/uploads/01-anubis-leak-site-disclosure-768x593.png 768w" sizes="(max-width: 635px) 100vw, 635px" /><br /> 494</em></p> 495<p><em>Figure 1. Excerpt from the leak site’s landing page for this disclosure. The victim’s name is left visible because Coca-Cola and the threat actor have each already made it public, only the site’s onion address is masked.</em></p> 496<p><em><img decoding="async" class="alignnone wp-image-4507 lazyload" data-src="https://constella.ai/wp-content/uploads/02-anubis-leak-site-categories.png" alt="Anonymized leak site categorization page" width="522" height="403" data-srcset="https://constella.ai/wp-content/uploads/02-anubis-leak-site-categories.png 1000w, https://constella.ai/wp-content/uploads/02-anubis-leak-site-categories-300x232.png 300w, https://constella.ai/wp-content/uploads/02-anubis-leak-site-categories-768x593.png 768w" data-sizes="(max-width: 522px) 100vw, 522px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 522px; --smush-placeholder-aspect-ratio: 522/403;" /></em></p> 497<p><em>Figure 2. The threat actor’s own summary of how it organized the stolen data into categories, reproduced here with only the site header masked.</em></p> 498<p>The leak was organized into three categories, each posted as evidence that the intrusion reached deep into the business rather than stopping at its perimeter.</p> 499<h3>Engineering and OT documentation</h3> 500<p>Confidential equipment documentation, CAD and DWG drawings, process control schematics and internal maintenance manuals for production line hardware.</p> 501<h3>Production and formulation data</h3> 502<p>Vendor and ingredient specification sheets referencing product formulations across the manufacturer’s beverage and dairy lines.</p> 503<h3>HR and people data</h3> 504<p>Employee directories with phone numbers and emergency contacts, compensation and payroll spreadsheets, disciplinary and termination case files and, for a small number of staff, scanned government issued identity documents.</p> 505<p>To illustrate the HR category without republishing anyone’s personal data, the two figures below show the general shape of what was posted, fully redacted.</p> 506<p><em><img decoding="async" class="alignnone wp-image-4508 lazyload" data-src="https://constella.ai/wp-content/uploads/03-vendor-credential-package-summary.png" alt="Anonymized employee directory" width="597" height="461" data-srcset="https://constella.ai/wp-content/uploads/03-vendor-credential-package-summary.png 1000w, https://constella.ai/wp-content/uploads/03-vendor-credential-package-summary-300x232.png 300w, https://constella.ai/wp-content/uploads/03-vendor-credential-package-summary-768x593.png 768w" data-sizes="(max-width: 597px) 100v
506w, 597px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 597px; --smush-placeholder-aspect-ratio: 597/461;" /></em></p> 507<p><em>Figure 3. Structure of a leaked employee directory. Every name, phone number and emergency contact has been blacked out.</em></p> 508<p><em><img decoding="async" class="alignnone wp-image-4509 lazyload" data-src="https://constella.ai/wp-content/uploads/04-credential-exposure-breakdown.png" alt="Anonymized internal HR memo" width="598" height="461" data-srcset="https://constella.ai/wp-content/uploads/04-credential-exposure-breakdown.png 1000w, https://constella.ai/wp-content/uploads/04-credential-exposure-breakdown-300x232.png 300w, https://constella.ai/wp-content/uploads/04-credential-exposure-breakdown-768x593.png 768w" data-sizes="(max-width: 598px) 100vw, 598px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 598px; --smush-placeholder-aspect-ratio: 598/461;" /></em></p> 509<p><em>Figure 4. Structure of an internal HR memo included in the leak. The brand’s logo is left visible since the company’s identity is already public, the names, titles and location of the individual staff involved have been redacted.</em></p> 510<p>The leak site framed the HR exposure as proof the company stored sensitive employee records, including identity documents, with inadequate access controls. Whatever the threat actor’s motive for saying so, the underlying observation holds up on its own: once an attacker is inside, the blast radius of a ransomware event is rarely limited to the systems that were technically in scope.</p> 511<h2>The Part Ransomware Groups Never Explain</h2> 512<p><em>Every leak site post follows the same script: a countdown timer, a data sample, a ransom demand. What is missing, deliberately, is the initial access story.</em></p> 513<p>That missing piece is exactly what Constella’s telemetry is built to reconstruct. Across the incidents we track, one input shows up more consistently than any exploit or misconfiguration: a credential that was already stolen, weeks or months earlier, by malware the victim never even knew was on a device.</p> 514<ul> 515<li><strong>8B: </strong>credentials harvested by infostealers globally in 2025</li> 516<li><strong>54%+: </strong>of 2024 to 2025 ransomware victims had domain credentials sitting in a stealer log before the attack</li> 517<li><strong><48h: </strong>typical window between a log surfacing and it being weaponized by a ransomware crew</li> 518<li><strong>$1 to $100: </strong>street price of a single stealer log on Telegram and dark web markets</li> 519</ul> 520<p>Infostealers, commodity malware families that quietly harvest saved browser passwords, session cookies, autofill data and local password manager vaults, have become the single most common initial infection vector our industry tracked in 2025. They are cheap, automated and do not need a zero day, a single pirated software installer, a fake job application attachment or a cracked game loader is enough to plant one on a laptop. What comes out the other end reads like a master key to someone’s entire digital life, personal and corporate accounts included.</p> 521<h2>Case Study: Inside a Vendor Employee’s Credential Package</h2> 522<p><em>An anonymized breakdown of a real package our research team observed, used here purely as an example of what this kind of exposure looks like from the inside</em></p> 523<p>To make the “infostealer feeds ransomware” pipeline concrete, we walk through a credential package believed to belong to an employee of a third party digital agency, referred to here as “VendorCo”, contracted to build and maintain staging and production websites for several of The Coca-Cola Company’s brands. We want to be precise about what we can and cannot claim, we cannot prove this specific package was the entry point Anubis used, and we are not asserting that it was. We present it because it is a genuine, representative example of exactly the kind of exposure that gives a ransomware affiliate everything it needs, and because it shows how much a single infected laptop, far outside the victim’s own network, can expose.</p> 524<ul> 525<li><strong>789: </strong>saved credential pairs recovered from the browser credential store</li> 526<li><strong>543: </strong>unique hostnames represented, across at least 140 distinct root domains</li> 527<li><strong>540: </strong>browser session cookies exported alongside the credentials</li> 528<li><strong>1: </strong>local password manager vault store found sitting on the same disk</li> 529</ul> 530<h2>Password hygiene, or the lack of it</h2> 531<p>The 789 credential pairs in this package were secured by just 118 unique passwords. On average, every password in use was reused across close to seven different logins. The single most common password appeared 146 times across 87 distinct hosts, meaning it alone would have been worth trying against 87 separate systems. O
531nly 96 distinct usernames appear across all 789 entries, a strong signal that shared service accounts, not individual named logins, protected much of this environment.</p> 532<h2>Breakdown by category</h2> 533<p><img decoding="async" class="alignnone wp-image-4514 lazyload" data-src="https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-scaled.png" alt="ransomware breakdown" width="903" height="406" data-srcset="https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-scaled.png 2560w, https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-300x135.png 300w, https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-1024x461.png 1024w, https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-768x346.png 768w, https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-1536x691.png 1536w, https://constella.ai/wp-content/uploads/ransomware_breakdown_high_res-2048x922.png 2048w" data-sizes="(max-width: 903px) 100vw, 903px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 903px; --smush-placeholder-aspect-ratio: 903/406;" /></p> 534<p> </p> 535<p>The category worth sitting with is not the personal accounts, it is the 503 credential pairs for the brand site content management environments themselves, spanning staging, QA, UAT and production instances across dozens of distinct beverage and dairy brand websites, most running the same enterprise CMS platform (Adobe Experience Manager, identifiable from the CMS specific paths and cloud hostnames in the package) with default or reused service account passwords. A password reused across ten test environments is, from an attacker’s point of view, a password that is worth trying on the eleventh, production one too.</p> 536<p>Layered on top of that were 27 credentials for cloud infrastructure, DevOps and source control consoles, and 29 credentials for corporate identity and SSO providers, plus a further 540 browser session cookies exported from the same two browsers, among them sessions for a mainstream identity provider and a major cloud office suite. Session cookies matter because, if still valid and replayed before they expire, they can grant access to an already authenticated session without ever touching the account’s password or its multi factor prompt, we have not tested whether any specific cookie in this package still works, only that this class of exposure is present.</p> 537<h2>What most credential monitoring tools skip entirely</h2> 538<p>Most programs that watch for stolen credentials stop at two things: passwords and cookies. This package shows why that is not enough. Its autofill store, the cache of values a browser remembers to speed up form filling, held a different kind of evidence altogether, the kind most monitoring tools never look at because autofill was never designed to hold credentials in the first place, and it turned out to hold as much as the credentials themselves.</p> 539<h3>Personal identity</h3> 540<p>A full name, a street number and postal code consistent with a home address, and a number formatted as a valid national identification document, plus the local storage folder for a consumer password manager browser extension.</p> 541<h3>Client side identity and documents</h3> 542<p>An email address on the client’s own domain, used repeatedly across the package, saved alongside links that look like the organization’s own internal documents and systems.</p> 543<h3>Network footprint</h3> 544<p>Six IP addresses distinct from the 19 exposed admin consoles described above, including a registered network block associated with a Brazilian city.</p> 545<h3>Cloud and DevOps activity</h3> 546<p>A confirmed AWS console action deleting a cloud resource, a production environment named explicitly alongside staging, UAT and test, and a source code search against a specific, versioned release branch.</p> 547<p>On the personal identity side, the password manager folder holds the extension’s encrypted vault state; infostealers routinely exfiltrate it wholesale, and whether it can be unlocked depends on the specific malware family and on how strong the underlying master password was; we found no evidence in this package that the vault had actually been decrypted.</p> 548<p>More strikingly, the forms filled out by this individual also reveal a persistent identity on the client’s own domain, an email address issued directly by the organization rather than by the vendor, appearing repeatedly, dozens of times, across unrelated saved logins and forms throughout the package. Saved alongside that identity are entries that look like references to the organization’s own internal documents and systems, personal cloud storage links, a production content address, an internal knowledge base page, and search terms tied to a privacy compliance effort. A small number of entries also name other, separate people at the organization, who appear to have simply shared a document with this individual at some point. Below are illustrative, redacted examples of what these entries look like in the raw data:</p> 549<p><img decoding="async" class="alignnone wp-image-4515 lazyload" data-src="https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-scaled.png" alt="ransomware leaking data" width="879" height="499" data-srcset="https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-scaled.png 2560w, https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-300x170.png 300w, https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-1024x582.png 1024w, https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-768x436.png 768w, https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-1536x873.png 1536w, https://constella.ai/wp-content/uploads/ransomware_leaking_data_high_res-2048x1164.png 2048w" data-sizes="(max-width: 879px) 100vw, 879px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 879px; --smush-placeholder-aspect-ratio: 879/499;" /></p> 550<p>None of that is marketing website content. It is internal legal, privacy, and architecture material, further evidence that this exposure reached past staging servers and into the kind of internal work product an organization would assume stayed behind its own walls.</p> 551<p>Separately, the same store recorded a direct AWS console action, a cloud resource identified by its internal reference being deleted, evidence of hands-on infrastru
551cture management rather than a login that was saved and never used. Deployment tool fields nearby named a production environment explicitly, alongside staging, UAT and test equivalents, and a separate field recorded a search for open pull requests against a specific, versioned release branch in a source code repository. None of this is a password or a cookie either; it is proof of an active operator working inside real systems, a different and arguably stronger signal than a saved login that may never have been used.</p> 552<ul> 553<li><strong>6: </strong>additional IP addresses found only in autofill data, distinct from the 19 above</li> 554<li><strong>3+: </strong>internal document or meeting references tied to the client’s own domain, found in autofill</li> 555<li><strong>1: </strong>confirmed AWS console action, a cloud resource being deleted</li> 556<li><strong>1: </strong>production environment named explicitly in deployment tool fields</li> 557</ul> 558<p>Taken as a whole, none of this came from a password field or a cookie file. It is contextual evidence, a working client identity, real documents, real infrastructure actions, real environment names, and it is exactly what turns a generic-looking credential list into proof of an active operator with production-level access, all starting from one infected laptop that belonged to an outside vendor, not to Fairlife itself. It is also exactly the evidence a monitoring program built only to flag exposed passwords and session cookies will never surface, because it never looks at the autofill store at all.</p> 559<h2>Infrastructure exposed directly to the public internet</h2> 560<p>Beyond the brand hostnames already discussed, the package also contained 19 credential pairs for admin consoles reached directly by public IP address rather than by a domain name, with no VPN or reverse proxy evident in the saved path, plus a further 72 credential pairs for the same kind of console on private, internal IP ranges reachable only from inside a corporate or vendor network. We cannot confirm from the package alone which client or project each of these specific addresses belongs to; they were saved using the same admin console pattern seen throughout the rest of this vendor’s credentials, Adobe Experience Manager’s CRXDE Lite and Package Manager, which is consistent with the same vendor managing them as part of its broader portfolio rather than evidence tying them specifically to Fairlife. Both of those consoles are development tools, not public-facing pages. CRXDE Lite lets a logged-in user browse and edit the underlying content repository directly, and the Package Manager lets a logged-in user upload a package that installs and runs on the server. That is the mechanism behind real-world incidents where this kind of exposed console was used to run attacker-supplied code, so pairing it with working admin credentials in the same package turns a single stolen login into control of the server itself, not just its content.</p> 561<p>The same package also included saved sign-in credentials for Amazon Web Services accounts across four separate regions: US East, two US West zones, and South America. On top of the CMS access already described, this one credential set could reach into cloud infrastructure spanning multiple regions and continents.</p> 562<h2>One vendor, more than one client</h2> 563<p>The package also lets us answer a question that matters a great deal for how an organization should think about this kind of risk: was this person a direct employee of The Coca-Cola Company, or someone working for a vendor that serves many clients? The evidence points toward the latter. Alongside the brand and CMS credentials, the package included logins and session cookies for a distinct set of internal tools, an identity provider, an internal learning academy, an HR self-service portal, and at least three separate Slack workspaces tied to different client account teams, all branded separately from The Coca-Cola Company.</p> 564<p>At the same time, the picture is not perfectly clean. As the autofill findings above show, the same package also contained one email account issued directly on the victim organization’s own domain, used repeatedly and alongside what look like the organization’s own internal documents, evidence that the individual had, at some point, been provisioned a client side identity for closer collaboration, a common practice with embedded vendor staff that quietly erase
564s the boundary between vendor risk and an organization’s own risk.</p> 565<p>Just as tellingly, the credentials were not limited to The Coca-Cola Company’s brand family. The package included exactly one confirmed credential pair for a development environment whose hostname referenced a well-known global quick service restaurant chain, entirely unrelated to Fairlife or The Coca-Cola Company. We only found one such pair, so we are not claiming broad access to that other company’s systems; only that it exists at all is the point. It is consistent with how shared services vendors typically operate; the same staff often hold credentials for more than one unrelated enterprise client at once, which means a single infection on a single laptop at a vendor like this does not necessarily stay contained to one client.</p> 566<ul> 567<li><strong>19: </strong>public IPs saved with admin console credentials, no network layer barrier evident</li> 568<li><strong>4: </strong>distinct AWS regions with sign-in credentials in the same package</li> 569<li><strong>2: </strong>unrelated enterprise clients with confirmed credentials in the same package</li> 570<li><strong>1: </strong>client-issued email account found alongside the vendor’s own identities</li> 571</ul> 572<p><strong>EMPLOYEE, OR THIRD PARTY</strong></p> 573<p>Our read of the evidence is that this was a vendor employee, not a direct hire of The Coca-Cola Company, based on the concentration of separately branded internal tools and multi-client Slack workspaces in the package. We are flagging our reasoning, not just our conclusion, so it can be checked; the same reasoning is what led us to also find the one client-issued mailbox that complicates a clean answer. We think that complication is worth stating plainly rather than smoothing over. Either way, the distinction changes the right response: a compromised direct employee is contained by that one company’s own controls; a compromised vendor employee is contained by nobody’s controls by default, unless every client that vendor serves is independently monitoring for exactly this kind of exposure.</p> 574<h2>Illustrative, redacted log entry</h2> 575<p><img decoding="async" class="alignnone wp-image-4516 lazyload" data-src="https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-scaled.png" alt="ransomware redacted" width="917" height="274" data-srcset="https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-scaled.png 2560w, https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-300x90.png 300w, https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-1024x306.png 1024w, https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-768x230.png 768w, https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-1536x460.png 1536w, https://constella.ai/wp-content/uploads/ransomware_redacted_info_high_res-2048x613.png 2048w" data-sizes="(max-width: 917px) 100vw, 917px" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 917px; --smush-placeholder-aspect-ratio: 917/274;" /></p> 576<p><strong>WHY WE KEEP COMING BACK TO THIS EXAMPLE</strong></p> 577<p>Nothing in this package came from Fairlife’s or The Coca-Cola Company’s own network. It came from a laptop belonging to an outside agency contracted to build marketing websites. That distinction is precisely why it matters: security teams monitor their own endpoints closely and their vendors’ endpoints almost never, yet the credentials on that one vendor laptop opened doors into shared brand infrastructure just the same.</p> 578<h2>Beyond Infostealers, the Compilation Economy</h2> 579<p><em>What Constella sees that a single infostealer feed does not</em></p> 580<p>Infostealer logs are only one piece of the credential exposure picture, and treating them as the whole picture is one of the most common blind spots we see in security programs today. In a large share of the cases our research team investigates, individual credentials tied to a victim organization surface days, sometimes weeks, inside compiled credential lists well before a threat actor packages and posts a complete, named breach or ransomware disclosure. These
580compilations pull together credentials from many smaller sources, older breaches, smaller infostealer runs, phishing kits, and unrelated third-party leaks, and circulate quietly among initial access brokers long before any single victim organization is named publicly.</p> 581<p>This is the layer where initial access brokers do their real work. Rather than running their own infections, many brokers specialize in combing through combolists and stealer logs, verifying which corporate logins still work, and packaging that verified access for sale to whichever ransomware affiliate is buying that week. A credential that looks unremarkable inside a generic compilation can be worth hundreds or thousands of dollars once a broker confirms it opens a live corporate VPN, SSO portal or cloud console.</p> 582<p>This is also why Constella does not monitor infostealer output alone. Our platform correlates identity exposure across breach data, credential compilations, active infostealer logs and ransomware leak site disclosures in a single data layer, which is precisely how we are able to look at a case like this one and connect a credential package on one side to a leak site disclosure on the other. Most vendors in this space specialize in one of those four sources. As far as we can tell, Constella is the only company positioned to give an organization a single, correlated view across all of them, which is what makes it possible to catch the exposure while it is still sitting quietly in a compilation, long before it becomes the headline.</p> 583<h2>Connecting the Dots</h2> 584<p><em>A plausible, evidence-consistent reconstruction, not a forensic conclusion</em></p> 585<p>We want to be careful here. We cannot claim certainty that this specific package was the specific entry point Anubis used; attribution at that level of precision normally requires incident response access that neither artifact grants on its own. What we can say is that the two pieces of evidence are consistent with, and illustrative of, the exact pattern seen across the large majority of ransomware intrusions our industry tracks: a commodity infostealer infection upstream, a ransomware detonation downstream, and a broker economy somewhere in between turning one into the other.</p> 586<h3>Commodity infostealer infection</h3> 587<p>An employee at a third-party vendor is infected through a phishing lure, cracked software, or a malvertised download. The malware harvests browser saved passwords, session cookies, autofill data, and any local password manager vault, then exfiltrates it as a single package within minutes.</p> 588<h3>The package enters the compilation economy</h3> 589<p>The log is uploaded to a Telegram-based stealer channel or dark web marketplace, then often folded into larger compiled credential lists that get recirculated and reindexed by country, browser, and domains of interest, including the corporate CMS and cloud console hostnames it contains.</p> 590<h3>An initial access broker verifies and packages it</h3> 591<p>Brokers specifically search fresh logs and compilations for enterprise SSO, VPN, and cloud console strings, then confirm which ones still work. A package containing dozens of live corporate credentials and session cookies for a household name brand is worth far more resold as verified access than as a raw log.</p> 592<h3>A ransomware affiliate buys access</h3> 593<p>An Anubis affiliate, or a group exploiting a parallel vulnerability such as the CitrixBleed 2 flaw reported in connection with this wider campaign, uses purchased credentials or a related edge device exploit to establish a foothold, then moves laterally from vendor-adjacent infrastru
593cture toward the client’s core network.</p> 594<h3>Exfiltration, encryption, wipe, extortion</h3> 595<p>Roughly a terabyte of data is staged and exfiltrated. Encryption is triggered across production systems, wipe mode is used selectively for added pressure, and the leak site post goes up days later as the extortion lever.</p> 596<h2>The Third Party Blind Spot</h2> 597<p>Most enterprise security programs are still built around a simple, outdated assumption: that the perimeter which matters most is the one around their own employees and endpoints. A growing share of ransomware intrusions never touch a victim’s own laptop at all. They touch a vendor’s laptop, a marketing agency, a managed service provider, a contractor with a login to a shared content platform, and ride that trust relationship inward.</p> 598<p>In the case we walked through, a marketing and technology vendor held standing credentials into staging and production content systems for dozens of brand properties, credentials that show clear signs of having gone unrotated for a long time, were not scoped to least privilege, and were, as far as we can tell, never monitored for exposure on criminal marketplaces or in credential compilations. That is not a failure unique to any one company; it is close to the industry default, and it is precisely the gap Constella’s platform was built to close.</p> 599<h2>How Constella Helps Close This Gap</h2> 600<p><em>Recommendations we can back with our own platform capabilities</em></p> 601<ul> 602<li>01 Monitor your own organization and your vendors across every source that matters. Constella gathers information from breach data, credential compilations, active infostealer logs, and ransomware leak site activity in one place, so a silent infection becomes an actionable alert long before it is weaponized.</li> 603<li>02 Extend that visibility to third parties by contract, not by hope. Constella’s identity risk intelligence can be scoped to named vendors and contractors, so a marketing agency or managed service provider with standing access to your systems is monitored with the same rigor as your own workforce.</li> 604<li>03 Catch credentials while they are still in a compilation. Because our data lake spans more than 1 trillion attributes, Constella regularly surfaces exposed corporate credentials while they are sitting quietly inside a compiled list, well before a broker or affiliate has packaged them into a named attack.</li> 605<li>04 Treat session cookie exposure as seriously as password exposure. Stolen session cookies can bypass MFA entirely. Constella’s telemetry includes cookie and token exposure alongside credentials, giving security and identity teams a fuller picture than password monitoring alone.</li> 606<li>05 Get alerted the moment exposure appears, not on a quarterly cycle. Constella’s API delivers real-time alerts as soon as credentials tied to your organization or your vendors surface anywhere across our sources, so your team can act immediately instead of waiting for a periodic review.</li> 607</ul> 608<h2><strong data-start="759" data-end="793">See Infostealer Data in Action</strong></h2> 609<p>Explore Constella’s ThreatMap to see how exposed identity data is appearing across the global threat landscape.<br data-start="909" data-end="912" /><a href="https://threatmap.constella.ai/map"><strong data-start="914" data-end="941">Explore the ThreatMap â</strong></a></p> 610 </div> 611 </div> 612 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-47e1bb1c e-con-full e-flex e-con e-child" data-id="47e1bb1c" data-element_type="container" data-e-type="container" data-settings="{"background_background":"classic"}"> 613 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-5636e0d5 e-con-full e-flex e-con e-child" data-id="5636e0d5" data-element_type="container" data-e-type="container"> 614 <div class="elementor-element elementor-element-4c766034 elementor-widget elementor-widget-heading" data-id="4c766034" data-element_type="widget" data-e-type="widget" data-widget_type="heading.default"> 615 <h2 class="elementor-heading-title elementor-size-default">Share:</h2> </div> 616 <div class="elementor-element elementor-element-bab4d7e elementor-share-buttons--view-icon-text elementor-share-buttons--skin-gradient elementor-share-buttons--shape-square elementor-grid-0 elementor-share-buttons--color-official elementor-widget elementor-widget-share-buttons" data-id="bab4d7e" data-element_type="widget" data-e-type="widget" data-widget_type="share-buttons.default"> 617 <div class="elementor-grid"> 618 <div class="elementor-grid-item"> 619 <div class="elementor-share-btn elementor-share-btn_linkedin" role="button" tabindex="0" aria-label="Share on linkedin"> 620 <span class="elementor-share-btn__icon"> 621 <svg aria-hidden="true" class="e-font-icon-svg e-fab-linkedin" viewB
621ox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z"></path></svg> </span> 622 <div class="elementor-share-btn__text"> 623 <span class="elementor-share-btn__title"> 624 LinkedIn </span> 625 </div> 626 </div> 627 </div> 628 </div> 629 </div> 630 </div> 631 <div class="elementor-element elementor-element-3c13756b elementor-widget elementor-widget-heading" data-id="3c13756b" data-element_type="widget" data-e-type="widget" data-widget_type="heading.default"> 632 <h2 class="elementor-heading-title elementor-size-default">More Posts</h2> </div> 633 <div class="elementor-element elementor-element-790ea6a1 elementor-grid-1 elementor-posts--thumbnail-none elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-card-shadow-yes elementor-posts__hover-gradient elementor-widget elementor-widget-posts" data-id="790ea6a1" data-element_type="widget" data-e-type="widget" data-settings="{"cards_columns":"1","cards_columns_tablet":"2","cards_columns_mobile":"1","cards_row_gap":{"unit":"px","size":35,"sizes":[]},"cards_row_gap_tablet":{"unit":"px","size":"","sizes":[]},"cards_row_gap_mobile":{"unit":"px","size":"","sizes":[]}}" data-widget_type="posts.cards"> 634 <div class="elementor-widget-container"> 635 <div class="elementor-posts-container elementor-posts elementor-posts--skin-cards elementor-grid" role="list"> 636 <article class="elementor-post elementor-grid-item post-4492 post type-post status-publish format-standard has-post-thumbnail hentry category-insights category-identity-risk-intelligence" role="listitem"> 637 <div class="elementor-post__card"> 638 <div class="elementor-post__text"> 639 <h3 class="elementor-post__title"> 640 <a href="https://constella.ai/blog/the-rise-of-service-centric-credential-compilations/" > 641 The Rise of Service-Centric Credential Compilations </a> 642 </h3> 643 644 <a class="elementor-post__read-more" href="https://constella.ai/blog/the-rise-of-service-centric-credential-compilations/" aria-label="Read more about The Rise of Service-Centric Credential Compilations" tabindex="-1" > 645 Read More » </a> 646 647 </div> 648 </div> 649 </article> 650 <article class="elementor-post elementor-grid-item post-4477 post type-post status-publish format-standard has-post-thumbnail hentry category-insights category-identity-risk-intelligence" role="listitem"> 651 <div class="elementor-post__card"> 652 <div class="elementor-post__text"> 653 <h3 class="elementor-post__title"> 654 <a href="https://constella.ai/blog/ai-governance-fails-without-identity-intelligence-part-2/" > 655 AI Governance Fails Without Identity Intelligence – Part 2 </a> 656 </h3> 657 658 <a class="elementor-post__read-more" href="https://constella.ai/blog/ai-governance-fails-without-identity-intelligence-part-2/" aria-label="Read more about AI Governance Fails Without Identity Intelligence – Part 2" tabindex="-1" > 659 Read More » </a> 660 661 </div> 662 </div> 663 </article> 664 <article class="elementor-post elementor-grid-item post-4474 post type-post status-publish format-standard has-post-thumbnail hentry category-insights category-identity-risk-intelligence" role="listitem"> 665 <div class="elementor-post__card"> 666 <div class="elementor-post__text"> 667 <h3 class="elementor-post__title"> 668 <a href="https://constella.ai/blog/ai-governance-fails-without-identity-intelligence-part-1/" > 669 AI Governance Fails Without Identity Intelligence – Part 1 </a> 670 </h3> 671 672 <a class="elementor-post__read-more" href="https://constella.ai/blog/ai-governance-fails-without-identity-intelligence-part-1/" aria-label="Read more about AI Governance Fails Without Identity Intelligence – Part 1" tabindex="-1" > 673 Read More » </a> 674
675 </div> 676 </div> 677 </article> 678 <article class="elementor-post elementor-grid-item post-4466 post type-post status-publish format-standard has-post-thumbnail hentry category-insights category-identity-risk-intelligence" role="listitem"> 679 <div class="elementor-post__card"> 680 <div class="elementor-post__text"> 681 <h3 class="elementor-post__title"> 682 <a href="https://constella.ai/blog/your-employees-have-one-digital-identity/" > 683 Your Employees Have One Digital Identity </a> 684 </h3> 685 686 <a class="elementor-post__read-more" href="https://constella.ai/blog/your-employees-have-one-digital-identity/" aria-label="Read more about Your Employees Have One Digital Identity" tabindex="-1" > 687 Read More » </a> 688 689 </div> 690 </div> 691 </article> 692 </div> 693 694 </div> 695 </div> 696 </div> 697 </div> 698 </div> 699 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-1a4a4e45 e-flex e-con-boxed e-con e-parent" data-id="1a4a4e45" data-element_type="container" data-e-type="container"> 700 <div class="e-con-inner"> 701 <div class="elementor-element elementor-element-7d1cc00a elementor-post-navigation-borders-yes elementor-widget elementor-widget-post-navigation" data-id="7d1cc00a" data-element_type="widget" data-e-type="widget" data-widget_type="post-navigation.default"> 702 <div class="elementor-post-navigation" role="navigation" aria-label="Post Navigation"> 703 <div class="elementor-post-navigation__prev elementor-post-navigation__link"> 704 <a href="https://constella.ai/blog/the-rise-of-service-centric-credential-compilations/" rel="prev"><span class="post-navigation__arrow-wrapper post-navigation__arrow-prev"><svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-left" viewBox="0 0 256 512" xmlns="http://www.w3.org/2000/svg"><path d="M31.7 239l136-136c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9L127.9 256l96.4 96.4c9.4 9.4 9.4 24.6 0 33.9L201.7 409c-9.4 9.4-24.6 9.4-33.9 0l-136-136c-9.5-9.4-9.5-24.6-.1-34z"></path></svg><span class="elementor-screen-only">Prev</span></span><span class="elementor-post-navigation__link__prev"><span class="post-navigation__prev--label">Previous</span></span></a> </div> 705 <div class="elementor-post-navigation__separator-wrapper"> 706 <div class="elementor-post-navigation__separator"></div> 707 </div> 708 <div class="elementor-post-navigation__next elementor-post-navigation__link"> 709 <a href="https://constella.ai/blog/infostealers-are-exposing-more-than-passwords-heres-what-security-teams-need-to-know/" rel="next"><span class="elementor-post-navigation__link__next"><span class="post-navigation__next--label">Next</span></span><span class="post-navigation__arrow-wrapper post-navigation__arrow-next"><svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-right" viewBox="0 0 256 512" xmlns="http://www.w3.org/2000/svg"><path d="M224.3 273l-136 136c-9.4 9.4-24.6 9.4-33.9 0l-22.6-22.6c-9.4-9.4-9.4-24.6 0-33.9l96.4-96.4-96.4-96.4c-9.4-9.4-9.4-24.6 0-33.9L54.3 103c9.4-9.4 24.6-9.4 33.9 0l136 136c9.5 9.4 9.5 24.6.1 34z"></path></svg><span class="elementor-screen-only">Next</span></span></a> </div> 710 </div> 711 </div> 712 </div> 713 </div> 714 </div> 715 <footer data-elementor-type="footer" data-elementor-id="1514" class="elementor elementor-1514 elementor-location-footer" data-elementor-post-type="elementor_library"> 716 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-a5f7aaf e-flex e-con-boxed e-con e-parent" data-id="a5f7aaf" data-element_type="container" data-e-type="container"> 717 <div class="e-con-inner"> 718 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-b617dd7 e-con-full e-flex e-con e-child" data-id="b617dd7" data-element_type="container" data-e-type="container"> 719 <div class="elementor-element elementor-element-c53639f elementor-widget elementor-widget-text-editor" data-id="c53639f" data-element_type="widget" data-e-type="widget" data-widget_type="text-editor.default"> 720 <p><img class="alignnone wp-image-16 lazyload" data-src="https://constella.ai/wp-content/uploads/2026/01/Constella-Web-Logo-white-300x56.png" alt="Constella" width="178" height="33" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 178px; --smush-placeholder-aspect-ratio: 178/33;" /></p><p>Constella Intelligence is a global leader in identity risk intelligence, helping organizations detect, investigate, and respond to threats linked to exposed personal data. Powered by the worldâs largest breach and infostealer data lake â spanning over one trillion attributes across 125+ countries and 50+ languages â Constella delivers unmatched visibility into identity threats across the surface, deep, and dark web. Enterprises and technology partners worldwide rely on Constella to strengthen identity posture, fuel threat intelligence, and reduce digital risk.</p><p><img class="alignnone wp-image-166 lazyload" data-src="https://constella.ai/wp-content/uploads/2026/01/logo-Javelin-300x138.png" alt="" width="211" height="97" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==" style="--smush-placeholder-width: 211px; --smush-placeholder-aspect-ratio: 211/97;" /></p> </div>
721 </div> 722 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-339882c e-con-full e-flex e-con e-child" data-id="339882c" data-element_type="container" data-e-type="container"> 723 <div class="elementor-element elementor-element-081bbd4 elementor-widget elementor-widget-heading" data-id="081bbd4" data-element_type="widget" data-e-type="widget" data-widget_type="heading.default"> 724 <h3 class="elementor-heading-title elementor-size-default">Navigate the Constella site</h3> </div> 725 <div class="elementor-element elementor-element-1256ad8 eael-hamburger--none eael_advanced_menu_hamburger_disable_selected_menu_no eael-advanced-menu-hamburger-align-right eael-advanced-menu--no elementor-widget elementor-widget-eael-advanced-menu" data-id="1256ad8" data-element_type="widget" data-e-type="widget" data-widget_type="eael-advanced-menu.skin-six"> 726 <div data-hamburger-icon="<svg aria-hidden="true" class="e-font-icon-svg e-fas-bars" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M16 132h416c8.837 0 16-7.163 16-16V76c0-8.837-7.163-16-16-16H16C7.163 60 0 67.163 0 76v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16z"><
726/path></svg>" data-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" data-dropdown-indicator-class="<svg aria-hidden="true" class="e-font-icon-svg e-fas-angle-down" viewBox="0 0 320 512" xmlns="http://www.w3.org/2000/svg"><path d="M143 352.3L7 216.3c-9.4-9.4-9.4-24.6 0-33.9l22.6-22.6c9.4-9.4 24.6-9.4 33.9 0l96.4 96.4 96.4-96.4c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9l-136 136c-9.2 9.4-24.4 9.4-33.8 0z"></path></svg>" class="eael-advanced-menu-container eael-advanced-menu-align-left eael-advanced-menu-dropdown-align-left" data-hamburger-breakpoints="{"mobile":"Mobile Portrait (> 767px)","tablet":"Tablet Portrait (> 1300px)","desktop":"Desktop (> 2400px)","none":"None"}" data-hamburger-device="none"> 727 <ul id="menu-primary-menu-1" class="eael-advanced-menu eael-advanced-menu-dropdown-animate-to-top eael-advanced-menu-indicator eael-advanced-menu-vertical"><li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-170"><a href="#">Data & API</a> 728<ul class="sub-menu"> 729 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-237"><a href="https://constella.ai/data/intelligence-api/">Intelligence API</a></li> 730 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-238"><a href="https://constella.ai/data/data-pedigree-methodology/">Data Methodology</a></li> 731 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-239"><a href="https://constella.ai/data/use-cases-api/">Use Cases (API)</a></li> 732 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2506"><a href="https://constella.ai/data/developer-portal/">Developer Portal</a></li> 733 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-240"><a href="https://constella.ai/partner-inquiry/">Partner Inquiry</a></li> 734</ul> 735</li> 736<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-171"><a href="#">Platform</a> 737<ul class="sub-menu"> 738 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-241"><a href="https://constella.ai/platform/hunter-drp-overview/">Hunter+ DRP Overview</a></li> 739 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-242"><a href="https://constella.ai/platform/executive-protection/">Executive Protection</a></li> 740 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-243"><a href="https://constella.ai/platform/brand-protection/">Brand Protection</a></li> 741 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3005"><a href="https://constella.ai/platform/threat-investigation/">Threat Investigation</a></li> 742 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-245"><a href="https://constella.ai/request-a-demo/">Request a Demo</a></li> 743</ul> 744</li> 745<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-172"><a href="#">Solutions</a> 746<ul class="sub-menu"> 747 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2410"><a href="https://constella.ai/solutions/mdr-xdr/">MDR/XDR</a></li> 748 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2411"><a href="https://constella.ai/solutions/osint/">OSINT</a></li> 749 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2412"><a href="https://constella.ai/solutions/identity-theft-monitoring/">Identity Theft Monitoring</a></li> 750 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2413"><a href="https://constella.ai/solutions/session-hijacking-cookies/">Session Hijacking (Cookies)</a></li> 751 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2414"><a href="https://constella.ai/solutions/ransomware-prevention/">Ransomware Prevention</a></li> 752 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2415"><a href="https://constella.ai/solutions/account-takeover/">Account Takeover</a></li> 753 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-248"><a href="https://constella.ai/solutions/law-enforcement-agencies/">Law Enforcement Agencies</a></li> 754 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3846"><a href="https://constella.ai/solutions/fintech/">FinTech</a></li> 755 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3881"><a href="https://constella.ai/solutions/resellers-and-partners/">Resellers and Partners</a></li> 756</ul> 757</li> 758<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-173"><a href="#">Resources</a> 759<ul class="sub-menu"> 760 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-1428"><a href="/blog/">Blog / Insights</a></li> 761 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2133"><a href="/reports/">White Papers & Reports</a></li> 762 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2801"><a href="/datasheets/">Datasheets</a></li> 763 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2639"><a href="/case-study/">Case Studies</a></li> 764 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-1456"><a href="/news/">Company News</a></li> 765 <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-4241"><a href="/webinars/">Webinars</a></li> 766 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2802"><a href="https://constella.ai/events/">Events</a></li> 767 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-4181"><a href="https://constella.ai/identity-risk-intelligence-glossary/">Glossary</a></li> 768</ul> 769</li> 770<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-174"><a href="#">Company</a> 771<ul class="sub-menu"> 772 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-252"><a href="https://constella.ai/about-us/">About Us</a></li> 773 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-253"><a href="https://constella.ai/careers/">Careers</a></li> 774 <li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-254"><a href="https://constella.ai/contact-us/">Contact Us</a></li> 775</ul> 776</li> 777</ul> <button class="eael-advanced-menu-toggle" aria-label="Essential Addons Toggle Menu"> 778 <svg aria-hidden="true" class="e-font-icon-svg e-fas-bars" viewBox="0 0 448 512" xmlns="http://www.w3.org/2000/svg"><path d="M16 132h416c8.837 0 16-7.163 16-16V76c0-8.837-7.163-16-16-16H16C7.163 60 0 67.163 0 76v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16zm0 160h416c8.837 0 16-7.163 16-16v-40c0-8.837-7.163-16-16-16H16c-8.837 0-16 7.163-16 16v40c0 8.837 7.163 16 16 16z"></path></svg> </button> 779 </div> 780 </div>
781 </div> 782 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-326e5f1 e-con-full e-flex e-con e-child" data-id="326e5f1" data-element_type="container" data-e-type="container"> 783 <div class="elementor-element elementor-element-45a39f8 elementor-widget elementor-widget-heading" data-id="45a39f8" data-element_type="widget" data-e-type="widget" data-widget_type="heading.default"> 784 <h3 class="elementor-heading-title elementor-size-default">Subscribe to the Constella Newsletter</h3> </div> 785 <div class="elementor-element elementor-element-1660e19 elementor-widget elementor-widget-hubspot-form" data-id="1660e19" data-element_type="widget" data-e-type="widget" data-widget_type="hubspot-form.default"> 786 <div class="elementor-widget-container"> 787 788
788<script> 789 window.hsFormsOnReady = window.hsFormsOnReady || []; 790 window.hsFormsOnReady.push(()=>{ 791 hbspt.forms.create({ 792 portalId: 8482190, 793 formId: "3e724b4b-5160-4c26-af7b-809d1c9b9e92", 794 target: "#hbspt-form-1790864130000-8948982523", 795 region: "na1", 796 797 })}); 798 </script>
798 799 <div class="hbspt-form" id="hbspt-form-1790864130000-8948982523"></div> </div> 800 </div> 801 </div> 802 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-b9855da e-con-full e-flex e-con e-child" data-id="b9855da" data-element_type="container" data-e-type="container"> 803 <div class="elementor-element elementor-element-caa6b7a elementor-widget elementor-widget-text-editor" data-id="caa6b7a" data-element_type="widget" data-e-type="widget" data-widget_type="text-editor.default"> 804 <p>©2026 Constella Intelligence. All rights reserved.  </p> </div> 805 </div> 806 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-18716fa e-con-full e-flex e-con e-child" data-id="18716fa" data-element_type="container" data-e-type="container"> 807 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-ffa7c0b e-grid e-con-full e-con e-child" data-id="ffa7c0b" data-element_type="container" data-e-type="container"> 808 <div class="elementor-element elementor-element-bb29822 elementor-widget elementor-widget-text-editor" data-id="bb29822" data-element_type="widget" data-e-type="widget" data-widget_type="text-editor.default"> 809 <p><a href="https://constella.ai/blog/website-privacy-policy/">Privacy Policy</a></p> </div> 810 <div class="elementor-element elementor-element-77bae7d elementor-widget elementor-widget-text-editor" data-id="77bae7d" data-element_type="widget" data-e-type="widget" data-widget_type="text-editor.default"> 811 <p><a href="/terms-of-use/">Terms of Use</a></p> </div> 812 </div> 813 </div> 814 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-6f9c1b5 e-con-full e-flex e-con e-child" data-id="6f9c1b5" data-element_type="container" data-e-type="container"> 815 <div data-particle_enable="false" data-particle-mobile-disabled="false" class="elementor-element elementor-element-eb132e2 e-grid e-con-full e-con e-child" data-id="eb132e2" data-element_type="container" data-e-type="container"> 816 <div class="elementor-element elementor-element-ad0cdb9 elementor-widget elementor-widget-text-editor" data-id="ad0cdb9" data-element_type="widget" data-e-type="widget" data-widget_type="text-editor.default"> 817 <p><a href="/blog/acceptable-use-policy/">Acceptable Use Policy</a></p> </div> 818 </div> 819 </div> 820 </div> 821 </div> 822 </footer> 823
824<script type="speculationrules"> 825{"prefetch":[{"source":"document","where":{"and":[{"href_matches":"/*"},{"not":{"href_matches":["/wp-*.php","/wp-admin/*","/wp-content/uploads/*","/wp-content/*","/wp-content/plugins/*","/wp-content/themes/hello-elementor/*","/*\\?(.+)"]}},{"not":{"selector_matches":"a[rel~=\"nofollow\"]"}},{"not":{"selector_matches":".no-prefetch, .no-prefetch a"}}]},"eagerness":"conservative"}]} 826</script>
vendor: 1 bytes, line 826
826
827<script type="text/javascript"> 828_linkedin_partner_id = "8509378"; 829window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || []; 830window._linkedin_data_partner_ids.push(_linkedin_partner_id); 831</script>
831<script type="text/javascript"> 832(function(l) { 833if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; 834window.lintrk.q=[]} 835var s = document.getElementsByTagName("script")[0]; 836var b = document.createElement("script"); 837b.type = "text/javascript";b.async = true; 838b.src = "https://snap.licdn.com/li.lms-analytics/insight.min.js"; 839s.parentNode.insertBefore(b, s);})(window.lintrk); 840</script>
840 841<noscript> 842<img loading="lazy" height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=8509378&fmt=gif" /> 843</noscript> 844
845<script id="warmly-script-loader" src="https://opps-widget.getwarmly.com/warmly.js?clientId=c4f7ee7e0739a683e09f707fb00ffac9" defer></script>
845 846
846<script type="text/javascript"> 847 var _paq = _paq || []; 848 _paq.push(['setCustomDimension', 1, "{\u0022ID\u0022:3,\u0022name\u0022:\u0022Alberto Casares\u0022,\u0022avatar\u0022:\u00225ab49fdc2a39b87a4aa8ea079c38e2d3\u0022}"]); 849 _paq.push(['trackPageView']); 850 (function () { 851 var u = "https://analytics3.wpmudev.com/"; 852 _paq.push(['setTrackerUrl', u + 'track/']); 853 _paq.push(['setSiteId', '21898']); 854 var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; 855 g.type = 'text/javascript'; 856 g.async = true; 857 g.defer = true; 858 g.src = 'https://analytics.wpmucdn.com/matomo.js'; 859 s.parentNode.insertBefore(g, s); 860 })(); 861 </script>
861 862
862<script> 863 ( () => { 864 const lazyloadRunObserver = () => { 865 const lazyloadBackgrounds = document.querySelectorAll( `.e-con.e-parent:not(.e-lazyloaded)` ); 866 const lazyloadBackgroundObserver = new IntersectionObserver( ( entries ) => { 867 entries.forEach( ( entry ) => { 868 if ( entry.isIntersecting ) { 869 let lazyloadBackground = entry.target; 870 if( lazyloadBackground ) { 871 lazyloadBackground.classList.add( 'e-lazyloaded' ); 872 } 873 lazyloadBackgroundObserver.unobserve( entry.target ); 874 } 875 }); 876 }, { rootMargin: '200px 0px 200px 0px' } ); 877 lazyloadBackgrounds.forEach( ( lazyloadBackground ) => { 878 lazyloadBackgroundObserver.observe( lazyloadBackground ); 879 } ); 880 }; 881 const events = [ 882 'DOMContentLoaded', 883 'elementor/lazyload/observe', 884 ]; 885 events.forEach( ( event ) => { 886 document.addEventListener( event, lazyloadRunObserver ); 887 } ); 888 } )(); 889 </script>
889 890 <link rel='stylesheet' id='leadin-elementor-css' href='https://constella.ai/wp-content/plugins/leadin/build/elementor.css?ver=11.3.75' media='all' /> 891<link rel='stylesheet' id='leadin-css-css' href='https://constella.ai/wp-content/plugins/leadin/public/assets/style/leadin.css?ver=11.3.75' media='all' />
892<script id="leadin-script-loader-js-js-extra"> 893var leadin_wordpress = {"userRole":"visitor","pageType":"post","leadinPluginVersion":"11.3.75"}; 894//# sourceURL=leadin-script-loader-js-js-extra 895</script>
vendor: 1 bytes, line 895
895
896<script async defer id='hs-script-loader' src="https://js.hs-scripts.com/8482190.js?integration=WordPress&ver=11.3.75"></script>
vendor: 1 bytes, line 896
896
897<script id="smush-detector-js-extra"> 898var smush_detector = {"ajax_url":"https://constella.ai/wp-admin/admin-ajax.php","nonce":"9d97e6c695","is_mobile":"","data_store":{"type":"post-meta","data":{"post_id":4505}},"previous_data_version":"0","previous_data_hash":"818cfcf8eb76d75c83129a7a0e46d039"}; 899//# sourceURL=smush-detector-js-extra 900</script>
vendor: 1 bytes, line 900
900
901<script id="smush-detector-js" src="https://constella.ai/wp-content/plugins/wp-smush-pro/app/assets/js/smush-detector.min.js?ver=4.3.3"></script>
vendor: 1 bytes, line 901
901
902<script id="eael-general-js-extra"> 903var localize = {"ajaxurl":"https://constella.ai/wp-admin/admin-ajax.php","nonce":"05445665c0","i18n":{"added":"Added ","compare":"Compare","loading":"Loading..."},"eael_translate_text":{"required_text":"is a required field","invalid_text":"Invalid","billing_text":"Billing","shipping_text":"Shipping","fg_mfp_counter_text":"of"},"page_permalink":"https://constella.ai/blog/from-a-stolen-login-to-a-ransomware-leak-site/","cart_redirectition":"","cart_page_url":"","el_breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1300,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Widescreen","value":2400,"default_value":2400,"direction":"min","is_enabled":false}},"ParticleThemesData":{"default":"{\"particles\":{\"number\":{\"value\":160,\"density\":{\"enable\":true,\"value_area\":800}},\"color\":{\"value\":\"#ffffff\"},\"shape\":{\"type\":\"circle\",\"stroke\":{\"width\":0,\"color\":\"#000000\"},\"polygon\":{\"nb_sides\":5},\"image\":{\"src\":\"img/github.svg\",\"width\":100,\"height\":100}},\"opacity\":{\"value\":0.5,\"random\":false,\"anim\":{\"enable\":false,\"speed\":1,\"opacity_min\":0.1,\"sync\":false}},\"size\":{\"value\":3,\"random\":true,\"anim\":{\"enable\":false,\"speed\":40,\"size_min\":0.1,\"sync\":false}},\"line_linked\":{\"enable\":true,\"distance\":150,\"color\":\"#ffffff\",\"opacity\":0.4,\"width\":1},\"move\":{\"enable\":true,\"speed\":6,\"direction\":\"none\",\"random\":false,\"straight\":false,\"out_mode\":\"out\",\"bounce\":false,\"attract\":{\"enable\":false,\"rotateX\":600,\"rotateY\":1200}}},\"interactivity\":{\"detect_on\":\"canvas\",\"events\":{\"onhover\":{\"enable\":true,\"mode\":\"repulse\"},\"onclick\":{\"enable\":true,\"mode\":\"push\"},\"resize\":true},\"modes\":{\"grab\":{\"distance\":400,\"line_linked\":{\"opacity\":1}},\"bubble\":{\"distance\":400,\"size\":40,\"duration\":2,\"opacity\":8,\"speed\":3},\"repulse\":{\"distance\":200,\"duration\":0.4},\"push\":{\"particles_nb\":4},\"remove\":{\"particles_nb\":2}}},\"retina_detect\":true}","nasa":"{\"particles\":{\"number\":{\"value\":250,\"density\":{\"enable\":true,\"value_area\":800}},\"color\":{\"value\":\"#ffffff\"},\"shape\":{\"type\":\"circle\",\"stroke\":{\"width\":0,\"color\":\"#000000\"},\"polygon\":{\"nb_sides\":5},\"image\":{\"src\":\"img/github.svg\",\"width\":100,\"height\":100}},\"opacity\":{\"value\":1,\"random\":true,\"anim\":{\"enable\":true,\"speed\":1,\"opacity_min\":0,\"sync\":false}},\"size\":{\"value\":3,\"random\":true,\"anim\":{\"enable\":false,\"speed\":4,\"size_min\":0.3,\"sync\":false}},\"line_linked\":{\"enable\":false,\"distance\":150,\"color\":\"#ffffff\",\"opacity\":0.4,\"width\":1},\"move\":{\"enable\":true,\"speed\":1,\"direction\":\"none\",\"random\":true,\"straight\":false,\"out_mode\":\"out\",\"bounce\":false,\"attract\":{\"enable\":false,\"rotateX\":600,\"rotateY\":600}}},\"interactivity\":{\"detect_on\":\"canvas\",\"events\":{\"onhover\":{\"enable\":true,\"mode\":\"bubble\"},\"onclick\":{\"enable\":true,\"mode\":\"repulse\"},\"resize\":true},\"modes\":{\"grab\":{\"distance\":400,\"line_linked\":{\"opacity\":1}},\"bubble\":{\"distance\":250,\"size\":0,\"duration\":2,\"opacity\":0,\"speed\":3},\"repulse\":{\"distance\":400,\"duration\":0.4},\"push\":{\"particles_nb\":4},\"remove\":{\"particles_nb\":2}}},\"retina_detect\":true}","bubble":"{\"particles\":{\"number\":{\"value\":15,\"density\":{\"enable\":true,\"value_area\":800}},\"color\":{\"value\":\"#1b1e34\"},\"shape\":{\"type\":\"polygon\",\"stroke\":{\"width\":0,\"color\":\"#000\"},\"polygon\":{\"nb_sides\":6}
903,\"image\":{\"src\":\"img/github.svg\",\"width\":100,\"height\":100}},\"opacity\":{\"value\":0.3,\"random\":true,\"anim\":{\"enable\":false,\"speed\":1,\"opacity_min\":0.1,\"sync\":false}},\"size\":{\"value\":50,\"random\":false,\"anim\":{\"enable\":true,\"speed\":10,\"size_min\":40,\"sync\":false}},\"line_linked\":{\"enable\":false,\"distance\":200,\"color\":\"#ffffff\",\"opacity\":1,\"width\":2},\"move\":{\"enable\":true,\"speed\":8,\"direction\":\"none\",\"random\":false,\"straight\":false,\"out_mode\":\"out\",\"bounce\":false,\"attract\":{\"enable\":false,\"rotateX\":600,\"rotateY\":1200}}},\"interactivity\":{\"detect_on\":\"canvas\",\"events\":{\"onhover\":{\"enable\":false,\"mode\":\"grab\"},\"onclick\":{\"enable\":false,\"mode\":\"push\"},\"resize\":true},\"modes\":{\"grab\":{\"distance\":400,\"line_linked\":{\"opacity\":1}},\"bubble\":{\"distance\":400,\"size\":40,\"duration\":2,\"opacity\":8,\"speed\":3},\"repulse\":{\"distance\":200,\"duration\":0.4},\"push\":{\"particles_nb\":4},\"remove\":{\"particles_nb\":2}}},\"retina_detect\":true}","snow":"{\"particles\":{\"number\":{\"value\":450,\"density\":{\"enable\":true,\"value_area\":800}},\"color\":{\"value\":\"#fff\"},\"shape\":{\"type\":\"circle\",\"stroke\":{\"width\":0,\"color\":\"#000000\"},\"polygon\":{\"nb_sides\":5},\"image\":{\"src\":\"img/github.svg\",\"width\":100,\"height\":100}},\"opacity\":{\"value\":0.5,\"random\":true,\"anim\":{\"enable\":false,\"speed\":1,\"opacity_min\":0.1,\"sync\":false}},\"size\":{\"value\":5,\"random\":true,\"anim\":{\"enable\":false,\"speed\":40,\"size_min\":0.1,\"sync\":false}},\"line_linked\":{\"enable\":false,\"distance\":500,\"color\":\"#ffffff\",\"opacity\":0.4,\"width\":2},\"move\":{\"enable\":true,\"speed\":6,\"direction\":\"bottom\",\"random\":false,\"straight\":false,\"out_mode\":\"out\",\"bounce\":false,\"attract\":{\"enable\":false,\"rotateX\":600,\"rotateY\":1200}}},\"interactivity\":{\"detect_on\":\"canvas\",\"events\":{\"onhover\":{\"enable\":true,\"mode\":\"bubble\"},\"onclick\":{\"enable\":true,\"mode\":\"repulse\"},\"resize\":true},\"modes\":{\"grab\":{\"distance\":400,\"line_linked\":{\"opacity\":0.5}},\"bubble\":{\"distance\":400,\"size\":4,\"duration\":0.3,\"opacity\":1,\"speed\":3},\"repulse\":{\"distance\":200,\"duration\":0.4},\"push\":{\"particles_nb\":4},\"remove\":{\"particles_nb\":2}}},\"retina_detect\":true}","nyan_cat":"{\"particles\":{\"number\":{\"value\":150,\"density\":{\"enable\":false,\"value_area\":800}},\"color\":{\"value\":\"#ffffff\"},\"shape\":{\"type\":\"star\",\"stroke\":{\"width\":0,\"color\":\"#000000\"},\"polygon\":{\"nb_sides\":5},\"image\":{\"src\":\"http://wiki.lexisnexis.com/academic/images/f/fb/Itunes_podcast_icon_300.jpg\",\"width\":100,\"height\":100}},\"opacity\":{\"value\":0.5,\"random\":false,\"anim\":{\"enable\":false,\"speed\":1,\"opacity_min\":0.1,\"sync\":false}},\"size\":{\"value\":4,\"random\":true,\"anim\":{\"enable\":false,\"speed\":40,\"size_min\":0.1,\"sync\":false}},\"line_linked\":{\"enable\":false,\"distance\":150,\"color\":\"#ffffff\",\"opacity\":0.4,\"width\":1},\"move\":{\"enable\":true,\"speed\":14,\"direction\":\"left\",\"random\":false,\"straight\":true,\"out_mode\":\"out\",\"bounce\":false,\"attract\":{\"enable\":false,\"rotateX\":600,\"rotateY\":1200}}},\"interactivity\":{\"detect_on\":\"canvas\",\"events\":{\"onhover\":{\"enable\":false,\"mode\":\"grab\"},\"onclick\":{\"enable\":true,\"mode\":\"repulse\"},\"resize\":true},\"modes\":{\"grab\":{\"distance\":200,\"line_linked\":{\"opacity\":1}},\"bubble\":{\"distance\":400,\"size\":40,\"duration\":2,\"opacity\":8,\"speed\":3},\"repulse\":{\"distance\":200,\"duration\":0.4},\"push\":{\"particles_nb\":4},\"remove\":{\"particles_nb\":2}}},\"retina_detect\":true}"},"eael_login_nonce":"a631e89055","eael_register_nonce":"1fe23ccf84","eael_lostpassword_nonce":"e5e5a010e7","eael_resetpassword_nonce":"addbeab9e4"}; 904//# sourceURL=eael-general-js-extra 905</script>
vendor: 1 bytes, line 905
905
906<script id="eael-general-js" src="https://constella.ai/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.8.4"></script>
vendor: 1 bytes, line 906
906
907<script id="eael-1509-js" src="https://constella.ai/wp-content/uploads/essential-addons-elementor/eael-1509.js?ver=1789751609"></script>
vendor: 1 bytes, line 907
907
908<script id="smartmenus-js" src="https://constella.ai/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1"></script>
vendor: 1 bytes, line 908
908
909<script id="elementor-webpack-runtime-js" src="https://constella.ai/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.3.2"></script>
vendor: 1 bytes, line 909
909
910<script id="elementor-frontend-modules-js" src="https://constella.ai/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.3.2"></script>
vendor: 1 bytes, line 910
910
911<script id="jquery-ui-core-js-before"> 912jQuery.uiBackCompat = true; 913//# sourceURL=jquery-ui-core-js-before 914</script>
vendor: 1 bytes, line 914
914
915<script id="jquery-ui-core-js" src="https://constella.ai/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2"></script>
vendor: 1 bytes, line 915
915
916<script id="elementor-frontend-js-extra"> 917var EAELImageMaskingConfig = {"svg_dir_url":"https://constella.ai/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/img/image-masking/svg-shapes/"}; 918//# sourceURL=elementor-frontend-js-extra 919</script>
vendor: 1 bytes, line 919
919
920<script id="elementor-frontend-js-before"> 921var elementorFrontendConfig = {"environmentMode":{"edit":false,"wpPreview":false,"isScriptDebug":false},"i18n":{"shareOnFacebook":"Share on Facebook","shareOnX":"Share on X","pinIt":"Pin it","download":"Download","downloadImage":"Download image","fullscreen":"Fullscreen","zoom":"Zoom","share":"Share","playVideo":"Play Video","previous":"Previous","next":"Next","close":"Close","a11yCarouselPrevSlideMessage":"Previous slide","a11yCarouselNextSlideMessage":"Next slide","a11yCarouselFirstSlideMessage":"This is the first slide","a11yCarouselLastSlideMessage":"This is the last slide","a11yCarouselPaginationBulletMessage":"Go to slide"},"is_rtl":false,"breakpoints":{"xs":0,"sm":480,"md":768,"lg":1301,"xl":1440,"xxl":1600},"responsive":{"breakpoints":{"mobile":{"label":"Mobile Portrait","value":767,"default_value":767,"direction":"max","is_enabled":true},"mobile_extra":{"label":"Mobile Landscape","value":880,"default_value":880,"direction":"max","is_enabled":false},"tablet":{"label":"Tablet Portrait","value":1300,"default_value":1024,"direction":"max","is_enabled":true},"tablet_extra":{"label":"Tablet Landscape","value":1200,"default_value":1200,"direction":"max","is_enabled":false},"laptop":{"label":"Laptop","value":1366,"default_value":1366,"direction":"max","is_enabled":false},"widescreen":{"label":"Widescreen","value":2400,"default_value":2400,"direction":"min","is_enabled":false}},"hasCustomBreakpoints":true},"version":"4.3.2","is_static":false,"experimentalFeatures":{"e_font_icon_svg":true,"additional_custom_breakpoints":true,"container":true,"e_optimized_markup":true,"theme_builder_v2":true,"hello-theme-header-footer":true,"nested-elements":true,"import-export-customization":true,"e_pro_atomic_form":true,"e_pro_collection_loop":true,"mega-menu":true,"e_pro_variables":true,"e_pro_interactions":true},"urls":{"assets":"https:\/\/constella.ai\/wp-content\/plugins\/elementor\/assets\/","ajaxurl":"https:\/\/constella.ai\/wp-admin\/admin-ajax.php","uploadUrl":"https:\/\/constella.ai\/wp-content\/uploads"},"nonces":{"floatingButtonsClickTracking":"0d23ba8ee3","atomicFormsSendForm":"d01e779552"},"swiperClass":"swiper","settings":{"page":[],"editorPreferences":[]},"kit":{"body_background_background":"classic","viewport_tablet":1300,"active_breakpoints":["viewport_mobile","viewport_tablet"],"global_image_lightbox":"yes","lightbox_enable_counter":"yes","lightbox_enable_fullscreen":"yes","lightbox_enable_zoom":"yes","lightbox_enable_share":"yes","lightbox_title_src":"title","lightbox_description_src":"description"},"post":{"id":4505,"title":"From%20a%20Stolen%20Login%20to%20a%20Ransomware%20Leak%20Site%20%7C%20Constella","excerpt":"","featuredImage":"https:\/\/constella.ai\/wp-content\/uploads\/randsomware-leaks-1024x576.jpg"}}; 922//# sourceURL=elementor-frontend-js-before 923</script>
vendor: 1 bytes, line 923
923
924<script id="elementor-frontend-js" src="https://constella.ai/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.3.2"></script>
vendor: 1 bytes, line 924
924
925<script id="e-sticky-js" src="https://constella.ai/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=4.2.3"></script>
vendor: 1 bytes, line 925
925
926<script id="eael-1514-js" src="https://constella.ai/wp-content/uploads/essential-addons-elementor/eael-1514.js?ver=1789751609"></script>
vendor: 1 bytes, line 926
926
927<script id="imagesloaded-js" src="https://constella.ai/wp-includes/js/imagesloaded.min.js?ver=5.0.0"></script>
vendor: 1 bytes, line 927
927
928<script id="smush-lazy-load-js-before"> 929var smushLazyLoadOptions = {"autoResizingEnabled":false,"autoResizeOptions":{"precision":5,"skipAutoWidth":true,"cdnBaseURL":""}}; 930//# sourceURL=smush-lazy-load-js-before 931</script>
vendor: 1 bytes, line 931
931
932<script id="smush-lazy-load-js" src="https://constella.ai/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load.min.js?ver=4.3.3"></script>
vendor: 1 bytes, line 932
932
933<script id="leadin-forms-v2-js" defer src="https://js.hsforms.net/forms/embed/v2.js?ver=11.3.75"></script>
vendor: 1 bytes, line 933
933
934<script id="leadin-forms-v4-js" defer src="https://js.hsforms.net/forms/embed/8482190.js?ver=11.3.75"></script>
vendor: 1 bytes, line 934
934
935<script id="elementor-pro-webpack-runtime-js" src="https://constella.ai/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.2.3"></script>
vendor: 1 bytes, line 935
935
936<script id="wp-hooks-js" src="https://constella.ai/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255"></script>
vendor: 1 bytes, line 936
936
937<script id="wp-i18n-js" src="https://constella.ai/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216"></script>
vendor: 1 bytes, line 937
937
938<script id="wp-i18n-js-after"> 939wp.i18n.setLocaleData( { 'text direction\u0004ltr': [ 'ltr' ] } ); 940//# sourceURL=wp-i18n-js-after 941</script>
vendor: 1 bytes, line 941
941
942<script id="elementor-pro-frontend-js-before"> 943var ElementorProFrontendConfig = {"ajaxurl":"https:\/\/constella.ai\/wp-admin\/admin-ajax.php","nonce":"5af997911e","urls":{"assets":"https:\/\/constella.ai\/wp-content\/plugins\/elementor-pro\/assets\/","rest":"https:\/\/constella.ai\/wp-json\/"},"settings":{"lazy_load_background_images":true},"popup":{"hasPopUps":false},"shareButtonsNetworks":{"facebook":{"title":"Facebook","has_counter":true},"twitter":{"title":"Twitter"},"linkedin":{"title":"LinkedIn","has_counter":true},"pinterest":{"title":"Pinterest","has_counter":true},"reddit":{"title":"Reddit","has_counter":true},"vk":{"title":"VK","has_counter":true},"odnoklassniki":{"title":"OK","has_counter":true},"tumblr":{"title":"Tumblr"},"digg":{"title":"Digg"},"skype":{"title":"Skype"},"stumbleupon":{"title":"StumbleUpon","has_counter":true},"mix":{"title":"Mix"},"telegram":{"title":"Telegram"},"pocket":{"title":"Pocket","has_counter":true},"xing":{"title":"XING","has_counter":true},"whatsapp":{"title":"WhatsApp"},"email":{"title":"Email"},"print":{"title":"Print"},"x-twitter":{"title":"X"},"threads":{"title":"Threads"}},"facebook_sdk":{"lang":"en_US","app_id":""},"lottie":{"defaultAnimationUrl":"https:\/\/constella.ai\/wp-content\/plugins\/elementor-pro\/modules\/lottie\/assets\/animations\/default.json"}}; 944//# sourceURL=elementor-pro-frontend-js-before 945</script>
vendor: 1 bytes, line 945
945
946<script id="elementor-pro-frontend-js" src="https://constella.ai/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.2.3"></script>
vendor: 1 bytes, line 946
946
947<script id="pro-elements-handlers-js" src="https://constella.ai/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.2.3"></script>
vendor: 1 bytes, line 947
947
948<script id="wp-emoji-settings" type="application/json"> 949{"baseUrl":"https://s.w.org/images/core/emoji/17.0.2/72x72/","ext":".png","svgUrl":"https://s.w.org/images/core/emoji/17.0.2/svg/","svgExt":".svg","source":{"concatemoji":"https://constella.ai/wp-includes/js/wp-emoji-release.min.js?ver=7.1.2"}} 950</script>
vendor: 1 bytes, line 950
950
951<script type="module"> 952/*! This file is auto-generated */ 953var e="script#wp-emoji-settings",t=document.querySelector(e);if(!(t instanceof HTMLScriptElement))throw new Error("Element missing: "+e);const r=JSON.parse(t.text),s=(window._wpemojiSettings=r,"wpEmojiSettingsSupports"),o=["flag","emoji"];function i(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(s,JSON.stringify(t))}catch(e){}}function c(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data);e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0);const r=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data);return t.every((e,t)=>e===r[t])}function p(e,t){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var n=e.getImageData(16,16,1,1);for(let e=0;e<n.data.length;e++)if(0!==n.data[e])return!1;return!0}function u(e,t,n,r){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\udde8\ud83c\uddf6","\ud83c\udde8\u200b\ud83c\uddf6")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f");case"emoji":return!r(e,"\ud83e\u1fac8")}return!1}function f(e,t,n,r){let a;const s=(a="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):document.createElement("canvas")).getContext("2d",{willReadFrequently:!0}),o=(s.textBaseline="top",s.font="600 32px Arial",{});return e.forEach(e=>{o[e]=t(s,e,n,r)}),o}function a(e){var t=document.createElement("script");t.src=e,t.defer=!0,document.head.appendChild(t)}r.supports={everything:!0,everythingExceptFlag:!0},new Promise(t=>{let n=function(){try{var e=JSON.parse(sessionStorage.getItem(s));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(o),u.toString(),c.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"});const a=new Worker(URL.createObjectURL(r),{name:"wpTestEmojiSupports"});return void(a.onmessage=e=>{i(n=e.data),a.terminate(),t(n)})}catch(e){}i(n=f(o,u,c,p))}t(n)}).then(e=>{for(const n in e)r.supports[n]=e[n],r.supports.everything=r.supports.everything&&r.supports[n],"flag"!==n&&(r.supports.everythingExceptFlag=r.supports.everythingExceptFlag&&r.supports[n]);var t;r.supports.everythingExceptFlag=r.supports.everythingExceptFlag&&!r.supports.flag,r.supports.everything||((t=r.source||{}).concatemoji?a(t.concatemoji):t.wpemoji&&t.twemoji&&(a(t.twemoji),a(t.wpemoji)))}); 954//# sourceURL=https://constella.ai/wp-includes/js/wp-emoji-loader.min.js 955</script>
955 956 957</body> 958</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.