Dark Web Intel: 4corners.com.au Logins Found in Leak

HEROIC's dark web intelligence team identified a stealer log dump, titled "4corners.com.au - 1.013 emails," posted to a Telegram channel on June 10, 2026. The file contains 1,013 records, each including an email address, a plaintext password, and the URL of the account the credential unlocks. The listing's title points directly to accounts associated with 4corners.com.au, indicating the uploader packaged this batch around users of that specific site.

Why This Is Dangerous

Because these credentials were captured in plaintext straight from infected devices, an attacker does not need to crack or guess anything to use them. Each of the 1,013 records already pairs an email, a password, and the exact URL it belongs to, so anyone who buys or downloads this file can attempt to log in right away. Listings like this circulate on dark web channels specifically because they offer a ready-made, verified set of logins tied to a known site, saving attackers the effort of testing credentials blind.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the websites where the credentials were used

Why This Matters

For the 1,013 people in this file, the immediate risk is unauthorized access to their 4corners.com.au account and anywhere else that reused the same password. HEROIC's monitoring of dark web marketplaces and Telegram channels regularly turns up listings like this one, where attackers can run credential stuffing against other sites using the same email and password, potentially escalating a single leaked account into broader identity theft or financial fraud.

How Stealer Logs Work

Stealer logs are generated by infostealer malware that infects a victim's device, often through a pirated download, cracked software, or malicious attachment, and then quietly harvests saved passwords, autofill data, and browsing history from the browser. Once collected, the data is often sorted by the website it relates to, as seen here with the 4corners.com.au labeling, and distributed through Telegram channels and dark web forums dedicated to trading stolen credentials. HEROIC's dark web monitoring tracks these channels to identify newly leaked data before it spreads further.

Check If You Are Affected

If you want to know whether your email or passwords appear in this stealer log or others circulating on the dark web, HEROIC's free breach scanner checks your details against a database of more than 400 billion leaked records. It only takes a moment to search and can help you catch an exposed account before someone else does.