223 Hotmail Logins Leaked: Check the rangersupporttt Log Now

In June 2026, HEROIC analysts found a stealer log named "HOTMAIL rangersupporttt" uploaded to a Telegram channel by a user sharing malware harvested credentials under that handle. The file contained 223 records, each pairing a login URL, an email address, and a plaintext password tied to Hotmail accounts.

223 Accounts, Real and Ready to Use

This is a small log compared to others HEROIC tracks, but every one of the 223 credential pairs inside it is a working email and plaintext password, meaning there is no cracking or guessing required for anyone who obtains the file. If your Hotmail account is one of these 223, an attacker could log in the moment they open it.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• Associated Login URLs

Why This Matters

Even a small stealer log like this one can lead to credential stuffing and account takeover if the password was reused elsewhere. Because Hotmail often ties into other accounts through password recovery, the impact of a single compromised inbox can spread beyond the original 223 victims.

How Stealer Logs Work

A stealer log is produced when malware infects a device and copies saved browser passwords before sending them to the attacker. Smaller logs like this one, often distributed under a personal handle such as "rangersupporttt," are usually the output of a single infection campaign rather than a large scale breach.

Check If You Are Affected

Check your Hotmail address now with HEROIC's free breach scanner, which searches more than 400 billion leaked records. It only takes a moment to find out if you are one of the 223 accounts in this exposure.