The infostealers behind stealer logs
A handful of malware families produce most of the logs in circulation. They are rented to thousands of buyers, which is why the same names turn up everywhere.
A stealer log doesn’t record which malware made it, so a result on this site doesn’t name a family. The check finds your logins whichever stealer took them.
RedLine StealerFor years the most common source of stealer logs on the market.Windows, since 2020Lumma StealerThe stealer behind the fake “verify you are human” pages.Windows, since 2022VidarA long-running stealer, often delivered together with other malware.Windows, since 2018Raccoon StealerA low-cost stealer whose alleged operator was arrested in 2022.Windows, since 2019StealCA newer stealer that borrows from Vidar, Raccoon and RedLine.Windows, since 2023Atomic macOS StealerProof that Macs get infostealers too.macOS, since 2023
The full records are on Seer
This site shows how many stealer log records hold a login and a masked sample of them. Seer, which runs the check, shows every record in full: the saved logins and passwords, the cookies, the infected device and when the log was collected.
Seer also searches breach records and social accounts, so one email address shows everywhere it has leaked and every account it is linked to.
- Stealer log searchFull records from infected devices, by email, username, domain, password or IP address.
- Breached credentialsWhich data breaches an email address or username appears in, and what leaked with it.
- Social account searchThe accounts an email address, username or phone number is linked to across hundreds of sites.
- Plans and pricingA free account to start, and plans for investigators and security teams.