Cracked 1.6M ULP by EViLUMiNATUS Exposes More Emails Than Most City Populations

HEROIC's DarkHive threat team captured a stealer log titled [FREE] 16,42,079 LINES / URL LOGIN PASS / ULP uploaded to a popular hacking forum on December 1, 2024, attributed to the handle EViLUMiNATUS. After parsing the 1.6 million raw lines and running them through our 400B+ record deduplication pipeline, we confirmed 762,306 unique users newly exposed in Cracked 1.6M ULP by EViLUMiNATUS. The file contains email addresses, plaintext passwords, and homepage URLs, a complete credential stuffing starter kit distributed free of charge.

Why This Stealer Log Is Dangerous

Cracked 1.6M ULP by EViLUMiNATUS bundles the URL, login, and password into a single line per record, which automates the targeting step for attackers. A mid-sized city's worth of unique inboxes are now cross referenced with working passwords, and because the list was free, every skill level of threat actor is running it through stuffing tools right now.

What Was Exposed in Cracked 1.6M ULP by EViLUMiNATUS

• 762,306 unique email addresses
• Plaintext passwords with no cryptographic protection
• HomePage URLs pointing directly to affected services
• 1.6 million total harvested credential lines

Why This Matters

Credential stuffing is a numbers game, and 762,306 verified pairs dramatically tilt the odds in the attacker's favor. Even a one percent hit rate produces more than seven thousand account takeovers, enough to fuel weeks of downstream fraud, phishing, and unauthorized purchases.

How Database Credential Harvesting Works

Stealer malware runs quietly on victim machines, exporting saved browser credentials, session cookies, and autofill data to a remote operator. Aggregators like EViLUMiNATUS stitch the outputs from many victims into ULP compilations and post them on forums to build clout, often as a teaser for paid premium logs.

Check If You Are Affected

HEROIC's free breach scanner checks your email against Cracked 1.6M ULP by EViLUMiNATUS and every other leak in our 400B+ record index. Scan now, learn which passwords need rotating, and lock down your accounts before attackers put this fresh dump to work.