Finding CF-2998
Medium exposure on partners.meridianenergy.example
Mark in progressFalse positive
MediumCompleted
Third-partyDetected 2026-07-10 14:31Seen 5× across sourcesCredential evidence
Passwords are masked — full values require reveal permission- Identity
- [email protected]
- Login URL
- https://partners.meridianenergy.example/portal
- Password
- Gm3•••••••
- Matched asset
- partners.meridianenergy.example
- First seen in log
- 2026-07-07
Infected device
- Device
- LAPTOP-V3M8Q6
- Operating system
- Windows 11 Home 23H2
- IP at capture
- 198.51.100.83
- Country
- Türkiye
- Infected at
- 2026-07-07 17:57
- Antivirus
- Defender (active)
Source block
- Block
- BLK-88279
- Stealer family
- Vidar
- Posted
- 2026-07-07 11:41
- Channel
- Underground forum listing
- Lines in block
- 2,157
Related findings
Triage timeline
2026-07-10 14:31 · System
Finding created from stealer block and matched to asset partners.meridianenergy.example
2026-07-10 14:31 · System
Severity set to Medium based on asset criticality and credential context
2026-07-10 09:30 · A. Analyst
Status changed to Completed
Awaiting next analyst action