The bitcoincorefx File Paired 363 Emails With Plaintext Passwords

HEROIC analysts found a Telegram file named bitcoincorefx, dated January 2021, that paired 363 email addresses with plaintext passwords and the login URLs those passwords open. Three hundred sixty three may be a small number next to some of the larger files HEROIC tracks, but each pairing is a complete, working credential someone can use today. Scanning your email shows whether you are one of them.

Matching Emails to Passwords, One Pair at a Time

What makes a file like this useful to an attacker is the pairing itself. An email address alone is not much of a threat, and neither is a password without knowing whose it is. Put the two together, and every single entry becomes a ready to use login.

What Each Pairing in the bitcoincorefx File Includes

• Email Addresses: identify the account holder and give an attacker a target for phishing messages.
• Plaintext Passwords: readable exactly as typed, with no cracking step needed before use.
• URLs: confirm which login page each of the 363 password pairs was captured for.

Why a Complete Pairing Raises the Stakes

A matched email and password pair removes any guesswork for an attacker. Anyone whose pairing appears in this file risks direct account takeover on that login, and further risk on any other account where the same password happens to be reused.

How Files Like bitcoincorefx Get Put Together

A combolist is built by gathering email and password pairs from earlier sources and matching each one to the site it unlocks before sharing the file further. The name bitcoincorefx does not mean a specific company was hacked, it is simply the label chosen for this particular set of pairings.

Is Your Email Paired With a Password in This File?

Get a direct answer by choosing to scan your email. If your pairing shows up, change that password right away, and update it anywhere else you used the same one, since a matched pair is exactly what an attacker needs to log in immediately. This applies to work email addresses just as much as personal ones.