De-anonymization in cybersecurity is the process of using technical evidence to identify anonymous threat actors. Infostealer intelligence is uniquely effective for de-anonymization because criminals who operate malware sometimes infect their own devices or reuse personal accounts on operational machines.
Hudson Rock has used infostealer data to expose ransomware operators, nation-state affiliates, and fraud networks. Infection metadata, browser profiles, and personal credentials on criminal machines provide investigative leads that traditional OSINT cannot.
Read our methodology in de-anonymizing threat actors with infostealer intelligence and a Lazarus case in the infostealer-to-APT pipeline.