Recorded Future says law enforcement can use infostealer logs to track down users who visit CSAM sites and uncover their identities based on their other credentials
That's actually pretty damn smart
https://www.recordedfuture.com/caught-in-the-net-using-infostealer-logs-to-unmask-csam-consumers