How the ArtHouse CLoud Logs New Stealer Malware Led to 2,083 Stolen Logins

HEROIC analysts have identified and recorded the ArtHouse CLoud Logs New uploaded by a Telegram User stealer log breach, which exposed 2,083 records in February 2026. The compromised data includes email addresses, plaintext passwords, and URLs harvested from infected devices. This breach was distribted through Telegram, a platform increasingly used by threat actors to share stolen credential dumps with criminal comunities worldwide.

Why ArtHouse CLoud Logs New Is Dangerous

Stealer log breaches like ArtHouse CLoud Logs New are among the most dangerous types of credential leaks because the passwords are captured in plaintext directly from the victim's device. Unlike database breaches where passwords may be hashed, stealer logs provide attackers with credentials that are immediately usable. Every email and password pairing in this dump can be tested against banking sites, email providers, and social platforms within minutes of the file being downloaded.

What Was Exposed in ArtHouse CLoud Logs New

• Email Addresses
• Plaintext Passwords
• URLs (websites the victim visited or logged into)

Why This Matters

When attackers gain access to plaintext passwords paired with email addresses, they can launch credential stuffing attacks across hundreds of websites automatically. A single set of stolen login details can lead to account takeover on email, banking, shopping, and social media platforms. From there, identity theft and financial fraud become very real threats. Even if you have not heard of this breach before, your data may have been part of it and could already be in use by bad actors.

How Stealer Log Works

A stealer log is created when malware infects a person's computer or mobile device. The malware silently runs in the background, capturing every username and password the user types or that is saved in their browser. It also records the URLs associated with those logins, creating a detailed picture of the victim's online accounts. These logs are then packaged up and sold or shared on underground forums and Telegram channles, where other criminals download and use them to access accounts.

Check If You Are Affected

HEROIC offers a free breach scanner that checks your email address against more than 400 billion records in the DarkHive database, including stealer logs like this one. If your credentials appear in a breach, you will be notified so you can take action right away. Visit heroic.com to run your free scan and find out if your data has been compromised in this or any other known breach.