A live threat research briefing and dark web walkthrough for cybersecurity leaders.

Format: 20-minute executive briefing, live dark web demo, and a Q&A

Despite heavy investments in identity security, stolen corporate and customer credentials remain one of the primary initial access vectors for enterprise cyberattacks. On illicit marketplaces like Russian Market, threat actors trade over 30,000 infostealer "bot" logs monthly for as little as $10. Harvested via widespread malware campaigns, each log bundles stolen email addresses, passwords, and browser cookies across multiple organizations, fueling large-scale credential stuffing and account compromise.

Join the Rapid7 Threat Research team for an executive briefing and live walkthrough inside Russian Market. We will demonstrate how threat actors search and filter for target enterprise domains, how commoditised bot logs are traded, and how exfiltrated credentials facilitate initial access into corporate environments.

What We'll Cover

• The infostealer pipeline: an overview of how infostealer malware harvests employee and customer credentials to fuel automated credential stuffing and initial access attempts.
• Inside the dark web marketplace: how threat actors search and filter Russian Market for target enterprise domains, and why a single $10 bot log exposes credentials across multiple organizations.
• Disrupting initial access: how security teams leverage dark web threat intelligence to identify exposed corporate logins and customer credentials before they are weaponised.
• High-level risk mitigation: practical recommendations and actionable steps to strengthen credential monitoring and reduce exposure without creating operational drag.

As a thank you for your time:
A complimentary lunch e-voucher will be provided to all qualified live attendees.