Europe and Russia Home to Half of Credential Theft Victims Worldwide

According to Blueliv’s credential detection data, since the start of 2018 there has been a 39% increase in the number of compromised credentials detected from Europe and Russia, compared to the same period in 2017 (January-May). In fact, Europe and Russia are now home to half of the world’s credential theft victims (49%).

When Russian credential victims are removed from the dataset, this year-over-year comparison jumps to 62%. The Eurasian growth figures tracked by Blueliv are surprisingly higher than North America’s, which actually recorded a decline by almost half (48%) year over year.

Book a demo today to see GlobalDots is action.

Optimize cloud costs, control spend, and automate for deeper insights and efficiency.

Book a demo today to see GlobalDots is action.

These startling increases in cybercriminal success rates suggest that the credential theft industry is growing in the European region both in innovation and scope.

The report also observes some interesting trends in malware families being used to harvest these credentials. Pony, KeyBase and LokiPWS (also known as Loki Bot) have consistently been the most active stealers since the start of 2017, but Pony has always been several lengths ahead of its malware counterparts in terms of popularity. However, since the start of 2018, Blueliv has observed that LokiPWS has been narrowing the gap: the highest number of stealer samples detected by Blueliv’s infrastructure each month has now become a two-horse race between LokiPWS and Pony.

Close-up of credit cards and a security lock on a keyboard.
Image Source

Read more: Help Net Security

Latest Articles

Who Controls What Your Team Shares with AI? | Cloudflare Zero Trust Webinar

Your employees are using AI tools. You probably don’t know which ones, or what they’re sending.In this session, Ganesh The Awesome walks through how to close that gap in 30 minutes using Cloudflare Zero Trust and Cloudflare AI Gateway. Want to go deeper? We’re happy to run a 1-on-1 session tailored to your environment.

Ganesh The Awesome
29th July, 2026
In 2026, Most CDN Teams Still Find Out About Outages From Customers First

This post is based on a live panel webinar co-hosted by GlobalDots, Hydrolix, and AWS, where engineers and go-to-market leaders across CDN, edge, and agentic AI operations discussed what actually happens when delivery infrastructure breaks. Just five people on the call talking about where visibility fails today, and what changes once agents start watching the […]

Eduardo Rocha
15th July, 2026
From Alert to Action: A CDN & Edge Practitioners Summit

Most teams still learn about a CDN problem from a customer rather than from their own monitoring stack.In this panel, GlobalDots, Hydrolix, and AWS break down why that keeps happening and what it takes to fix it: full-fidelity data instead of sampled logs, and AI agents that can actually act on it. Full Webinar: Demo […]

Eduardo Rocha
15th July, 2026

Unlock Your Cloud Potential

Schedule a call with our experts. Discover new technology and get recommendations to improve your performance.

    GlobalDots' industry expertise proactively addressed structural inefficiencies that would have otherwise hindered our success. Their laser focus is why I would recommend them as a partner to other companies

    Marco Kaiser
    Marco Kaiser

    CTO

    Legal Services

    GlobalDots has helped us to scale up our innovative capabilities, and in significantly improving our service provided to our clients

    Antonio Ostuni
    Antonio Ostuni

    CIO

    IT Services

    It's common for 3rd parties to work with a limited number of vendors - GlobalDots and its multi-vendor approach is different. Thanks to GlobalDots vendors umbrella, the hybrid-cloud migration was exceedingly smooth

    Motti Shpirer
    Motti Shpirer

    VP of Infrastructure & Technology

    Advertising Services

    GlobalDots guided our migration to Cloudflare, implemented SSL for SaaS, eliminated certificate maintenance, and remained highly responsive throughout.

    Chris Cutajar
    Chris Cutajar

    Infrastructure Eng. & Security Manager