NoLimitSecu #531 - BreacHunt

NoLimitSecu #531 - BreacHunt

🎙 NoLimitSecu 👥 2K 📅 February 16, 2026 ⏱ 37 min 👁 140 📄 interview 🧭 2026-08-16
Available in: English (current) Français

Keywords

infostealercredentialsdark webinitial access brokercybercrime

Summary

In this episode of NoLimitSecu, Arnaud Garrigues, co-founder of BreacHunt, discusses the dark web market for credentials. He explains that initial access brokers (IABs) are a major source of cyberattacks, selling login credentials, session cookies, and other access data. Infostealers are malware that infect individual users’ devices, harvesting credentials and other sensitive information, which is then packaged and sold on platforms like Telegram. The price of such data varies, with individual archives selling for $2-10, and bulk access for $100-1500. Garrigues emphasizes the importance of data freshness for attackers and defenders. BreacHunt’s approach is to collect and analyze this data to provide early warnings to clients, focusing on data quality and context. He also discusses the competitive landscape, noting that many competitors are foreign, and highlights the importance of sovereignty and trust in choosing a threat intelligence provider. The conversation touches on the use of deception technologies like Moken as complementary solutions.

152 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into the infostealer ecosystem, explaining the roles of various actors and the economics of the dark web credential market. Garrigues’ arguments are well-structured and based on his professional experience, making the information credible. He effectively illustrates the threat model and the importance of proactive defense. The discussion is nuanced, acknowledging the limitations of current defenses and the evolving nature of cybercrime.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the information is based on expert opinion and professional experience rather than peer-reviewed research. The only source cited is BreacHunt’s website, which is the company’s own. The title accurately reflects the content, as the episode focuses on BreacHunt and the dark web credential market. No comments were provided for analysis.

136 words

Title / Content Match

The title accurately reflects the content, as the episode focuses on BreacHunt and the dark web credential market.

Quality & Reliability

7/10

The interview features an expert with 15 years in cybersecurity, providing detailed insights into the infostealer ecosystem. Claims are based on professional experience and observations, but lack verifiable sources or peer-reviewed references. The discussion is coherent and plausible, but the reliability is limited by the absence of external citations.

Key Moments

Cited Sources

  • BreacHunt — Company website of the guest's company, providing services for dark web monitoring.

Concurring Sources

  • BreacHunt — The company's website aligns with the services described in the video.

Contribution & Novelties

The video offers a practitioner’s perspective on the infostealer ecosystem, detailing the business model and operational aspects. It highlights the importance of data freshness and the need for multiple threat intelligence sources. The discussion on sovereignty and trust in choosing a provider is a valuable addition.

Pour aller plus loin :

85 words

Radar Profile

The radar profile shows high scores in information quantity and quality, with moderate technical depth and reliability. This indicates a content-rich interview that is accessible to a general audience but lacks formal citations.

Reliability 7/10