196,136 Social Media Logins Exposed in USA Target Stealer Log

HEROIC Analysts Flag a 196,136-Record Stealer Log Targeting Social Media

HEROIC's dark web monitoring team identified a stealer log named "200k HQ USA Target Social media and other sites," uploaded to a Telegram channel on 02-Apr-2023. The file contains 196,136 records, each pairing an email address with a plaintext password and the URL of the site the credentials were used on, with a stated focus on social media platforms among other sites.

Why This Social Media-Focused Stealer Log Is Dangerous

What stands out about this file is its focus on social media accounts specifically, alongside other sites. Every record already links an email and password to the exact platform it unlocks, so there's no cracking or guesswork needed. Because the passwords were captured and stored in plaintext, anyone who obtains the file can read the login instantly and use it right away, including on the social accounts named in the file.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the social media and other sites where the credentials were used

Why This Matters

With nearly 200,000 records aimed specifically at social media logins, this data is a direct route to account takeover on the exact platforms named. It also enables credential stuffing: if you reused that email and password combination on other sites, those accounts are exposed too, well beyond the social platforms this file was built around. A hijacked social account can also be used to impersonate you and target the people who trust you.

How Stealer Logs Work

Stealer logs come from malware that infects a device and quietly copies saved logins and active session data straight out of the browser, including whatever social media accounts happen to be logged in at the time. The result is a plain text file listing exactly which login works on which site. Files like this one, organized around social media targets, are then packaged and traded on Telegram, which is exactly where HEROIC analysts found it.

Check If You Are Affected

With close to 200,000 records in this file, and social media accounts specifically in scope, it's worth finding out where you stand. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including stealer logs like this one, and tells you immediately if you've been exposed. If you get a match, change that password right away and don't reuse it anywhere else.