116,058 Logins Exposed by BabaCloudLogs Stealer Log Dump

BabaCloudLogs put its name right in the file title when it uploaded "BabaCloudLogs 445 K ULP Line 03.07.2025" to Telegram, but the verified count inside tells a different story: 116,058 confirmed login records, each with an email, a plaintext password, and a URL attached. Dated July 3, 2025, this stealer log has been circulating for months, quietly giving anyone who finds it a stack of working credentials.

Why This Is Dangerous

None of the 116,058 passwords in this file are hashed or masked in any way, they're sitting there in plain text exactly as the victims typed them. That means an attacker doesn't need to run any cracking tools or wait for a computer to guess combinations, they can copy a row from the file and try logging in right now.

What Was Exposed

• 116,058 email addresses tied to real accounts
• Plaintext passwords with zero encryption
• URLs identifying the exact login page for each credential pair

Why This Matters

By the time a stealer log like this reaches a public Telegram channel, it's already been passed around, copied, and probably tested by whoever collected it first. The people behind the 116,058 accounts in this file may have had months to change their passwords without ever realizing it was neccessary, wich means plenty of these logins are probably still active today.

How Stealer Logs Work

Files named after a "log source," like BabaCloudLogs, usually trace back to a specific strain of infostealer malware or a specific operator running that malware across many infected devices. Once installed, the malware pulls saved passwords straight out of the victim's browser and bundles them into a ULP (URL, Login, Password) file, exactly the format used here.

Check If You Are Affected

Even a file with "just" 116,058 records can definately include your information if you've ever had malware on a device where you saved passwords in your browser. HEROIC's free scanner checks against more than 400 billion (400B+) leaked records so you can find out quickly and change anything that needs changing.