Daisy_Cloud Stealer Logs: 2,947 Passwords From 109 PCs

On January 16, 2023, HEROIC analysts identified a stealer log labeled “Daisy_Cloud” circulating on a Telegram channel, tied to 109 infected computers. The file contained 2,947 records of email addresses, plaintext passwords, and the URLs of the accounts those logins belonged to, all harvested directly from the infected machines.

Why the Daisy_Cloud Stealer Log Is Dangerous

Because this data came straight from malware running on victims' own computers, the passwords are not encrypted or hashed, they are stored in plaintext exactly as typed. Paired with the URL for each login, an attacker gets a ready-to-use list of accounts and passwords they can try immediately, with no cracking or guesswork needed to break in.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated account URLs

Why This Matters

A log tied to 109 infected PCs might look small next to breaches that hit millions, but the risk to each affected person is just as real. Attackers plug logs like this into automated tools that test the same email and password combination across banking sites, email providers, and shopping accounts. Anyone in this dataset who reused a password elsewhere is exposed to account takeover, financial fraud, or identity theft.

How This Stealer Log Was Created

Stealer logs come from infostealer malware, malicious code that quietly infects a device, often through a pirated program, fake software update, or a malicious attachment. Once installed, it searches the browser for saved logins, autofill data, and active sessions, packages everything into a file, and sends it back to whoever controls the malware. Files like this one are then bundled together and traded or given away on Telegram channels, where anyone can pick them up and start testing the credentials inside.

Check If You Were One of the 2,947 Records Exposed

If you want to know whether your email address or password shows up in this leak or any other, HEROIC's free breach scanner checks your details against a database of more than 400 billion leaked records. Run a free scan to see your exposure and get straightforward steps to secure your accounts.