COMBOLIS 100K MIX FRESH 100 Leaked Passwords May Unlock Your Accounts

In April 2026, HEROIC analysts identified a stealer log file circulating under the name COMBOLIS 100K MIX FRESH 100, uploaded to a Telegram channel by an individual user on 4 April 2026. The file contains 98,275 records, pairing email addresses with plaintext passwords and the exact website URLs those logins unlock.

Why This Smaller Stealer Log Is Still a Real Threat

At just under 100,000 records, this file is smaller than some of the multi million record dumps that make headlines, but the danger works the same way. Each entry pairs a working email and password with the exact site it logs into, so an attacker does not have to guess or crack anything. They can open the URL, enter the credentials captured in plaintext, and be logged into the account almost immediately.

What the COMBOLIS 100K MIX FRESH 100 Leak Contains

• Email addresses used as account usernames
• Plaintext (unencrypted) passwords
• The specific login URLs each credential pair works on

Why This Matters If You Reuse Passwords

98,275 working login pairs is still plenty of raw material for credential stuffing, where automated tools quietly test the same email and password combination across banking, email, retail, and social media sites. If you reuse a password across more than one account, a single exposed pair from this leak could lead to account takeover, identity theft, or financial fraud on accounts that had nothing to do with the original infection.

How Stealer Log Malware Builds Combolists Like This One

Stealer logs like this one come from infostealer malware, malicious software that infects a device through a fake download, cracked software, or phishing link. Once installed, it quietly scans the browser for saved passwords, autofill data, and session cookies, then sends everything back to the attacker. Criminals combine batches of these infections into files like this one, label them as a fresh batch (the "FRESH 100" tag seen here), and sell or share them through Telegram channels like the one this file surfaced from.

Check If Your Email Appears in This Stealer Log

With 98,275 records already circulating, the safest move is to check your exposure directly rather than assume a smaller leak means lower risk. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including stealer logs like this one, so you can see whether your credentials are affected and act before someone else does.