Bot shop
A marketplace that sells the output of one infected machine as a single unit: its cookies, saved passwords, browser fingerprint and time zone, packaged so a buyer can load the lot into an antidetect browser and resume the victim's sessions.
Why it matters to you
What is sold is not a password but a logged-in state, so the account controls that assume a login are never exercised. The buyer arrives already inside. Session revocation and device binding are the controls that matter; password rotation on its own does not touch this.
Where we meet it
Listings are priced by which services the machine was logged into rather than by how many credentials it held. One session at a bank or a cloud console outweighs a thousand forum passwords.
Connected terms
Antidetect browser
A browser built to present a consistent, disposable fingerprint per profile: its own canvas, fonts, timezone and proxy. Sold so a stolen session can be replayed from a machine that looks like the victim's.
Session cookie
The token that proves a browser is already logged in, copied straight out of a victim's browser by an infostealer. Replayed elsewhere it opens the account without the password and without a second factor.
Stealer log
The complete output of an infostealer infection: every saved browser password, session cookie, autofill record and crypto-wallet file from one victim machine, zipped into a single bundle.
Cloud of logs
A subscription Telegram channel that pours out fresh stealer logs daily to paying members. Bulk access to victims, sold like a streaming service.
Where this term stops being vocabulary
Dragnet is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the trade
Access listing
The IAB's ad format: industry, country, revenue, access level and price. Everything except the victim's name, which is disclosed to serious buyers in private.
Carding
The trade in stolen payment card data and the craft of turning it into goods: testing cards, choosing merchants, shipping to reshippers. An economy with its own schools, slang and reputations.
Cashout
The last mile: turning stolen access, cards or balances into money the criminal keeps. Gift cards, crypto, mule accounts, reshipping, each with its own fee and its own specialists.
Cloud of logs
A subscription Telegram channel that pours out fresh stealer logs daily to paying members. Bulk access to victims, sold like a streaming service.