Large compilations of stolen credentials are often aggregated from multiple sources and circulated on dark web forums and messaging platforms such as Telegram and Discord.
high
threat_activity
Describes common distribution channels for aggregated stolen credential lists.