597 Passwords From the 360proxy_login_pass Combolist Just Surfaced

HEROIC analysts identified a combolist labeled "360proxy_login_pass" uploaded to Telegram in June 2025. The file contains 597 records, each pairing an email address with a plaintext password and a URL showing which site the login was used on. The listing is associated with the United States and has been marked as a verified breach. Why the 360proxy_login_pass Leak Is Dangerous: The file's name suggests it targets accounts tied to proxy services, which are frequently used to mask online activity, including by people running automated scripts or bots. Every password in the file is stored in plaintext, meaning an attacker can use the credentials immediately without cracking or decrypting anything, and the included URLs point directly to the login pages where each one works. What Was Exposed in the 360proxy_login_pass Combolist: email addresses used as usernames, plaintext passwords stored without encryption, and URLs identifying the specific proxy or login service each credential belongs to. Why This Matters for the 597 Accounts Involved: If your proxy service login shows up in this file, an attacker could hijack your account to route their own traffic through it, potentially using your service allocation or billing without your knowledge. If the same password was reused on other accounts, the risk extends further, opening the door to credential stuffing against email, financial, or social media accounts. How a Combolist Like This One Works: A combolist pairs usernames or emails with matching passwords, usually compiled from breached databases, phishing pages, or malware-infected devices and then shared or sold on platforms like Telegram. Niche combolists like this one, built around a specific service such as a proxy provider, are often assembled by targeting that service directly rather than pulling from a broad, unrelated mix of accounts. Check If You Are Affected: With 597 records involved, this is a modest but real number of people whose credentials may currently be exposed. HEROIC's free breach scanner checks your email address against a database of more than 400 billion exposed records, including combolists like this one, so you can find out in seconds if your information was part of this leak or any other breach on file.