China 7 Leak Put 46,041 Stolen Emails and Passwords Online

HEROIC analysts found a stealer log dataset labeled "China 7" that was uploaded to a Telegram channel on February 18, 2023. The file contains 46,041 records made up of email addresses, plaintext passwords, and the URLs of the websites those credentials were used on, all pulled directly from malware-infected devices.

Why This Is Dangerous

Because this data comes straight from infostealer malware rather than a hacked server, every password in the file is plaintext and already matched to the exact login page it was used on. There's nothing for an attacker to crack or guess. They can simply copy each email, password, and URL combination and attempt to log in directly, turning the leak into instant access rather than a puzzle to solve.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites the credentials were used on

Why This Matters

With plaintext passwords tied to specific websites, the 46,041 people in this dataset face immediate risk of account takeover on those exact services. If any of them reused the same password for email, banking, or social media, attackers can also run credential stuffing attacks, testing the same login pairs against other popular platforms to expand their reach beyond the original site.

How Stealer Logs Work

Infostealer malware infects a device through common channels like cracked software, malicious email attachments, or fake downloads. Once installed, it silently pulls saved passwords, autofill data, and active browser sessions from the victim's machine and bundles them into a single log file. These files, like the one behind "China 7," are then distributed through channels such as Telegram, where they can be downloaded and used by anyone within minutes.

Check If You Are Affected

If you want to know whether your email or passwords appear in this leak or any other, HEROIC's free breach scanner checks your information against a database of more than 400 billion exposed records and gives you an instant, clear answer.