The 4KK Social Network Dump Exposed 4 Million Login Credentials

The 4KK Social Network Combolist Surfaces With 4 Million Records

In April 2023, HEROIC analysts identified a combolist file labeled 4KK Social Network UHQ Base circulating on Telegram, exposing 4,022,476 records of email addresses, plaintext passwords, and the URLs those accounts belonged to. The file specifically bundles credentials tied to social media accounts, making it a valuable target for attackers looking to take over profiles rather than bank accounts.

Why This Is Dangerous

Social media accounts hold more than just photos and posts, they often connect to email addresses, payment methods, and a person's entire network of friends and followers. Because these passwords are stored in plaintext, an attacker can log into an account instantly and use it to impersonate the real owner, send scam messages, or pivot into other connected services.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each social media account

Why This Matters

With more than 4 million social media logins in one file, attackers have enough volume to run large scale credential stuffing campaigns, testing the same email and password combinations across banking, shopping, and other personal accounts. A hijacked social media profile can also be used to scam friends and family, spread malware, or steal a person's identity by piecing together personal details shared in posts and messages.

How a Combolist Like 4KK Social Network Gets Assembled

A combolist labeled UHQ, short for ultra high quality, typically means the credentials have already been checked and confirmed to work, making it more valuable to buyers. These lists are built by combining login data from smaller breaches, phishing pages targeting social media users, and stealer malware, then merged into a single large file before being sold or traded on Telegram.

Check If You Are Affected

With millions of social media accounts exposed in this leak, checking your own exposure takes only a moment. HEROIC's free breach scanner searches more than 400 billion leaked records, including combolists like 4KK Social Network, so you can confirm whether your login was included and update your password before someone else logs in as you.