DAMN ISRAEL OTTOHELP Jun 2023: 5,552 Credentials in Attacker Hands

The Larger June 2023 Batch: DAMN_ISRAEL OTTOHELP's 236-File Collection

October 18, 2023 was the only day DAMN_ISRAEL OTTOHELP released two seperate batches from the same calendar month. Both the 58 PCS and the 236 PCS collections were labeled June 2023, dropped simultaneously as part of the operator's mass archive dump. The 236 PCS batch is the larger of the pair: 5,552 US credentials across 236 stealer log files, averaging approximately 23.5 records per file. Why the operator chose to split June's acumulated data into two distinct releases rather than consolidating them is not documented -- but the pattern suggests different collection sub-campaigns or different infrastructure pools harvested at different points during June 2023.

DAMN_ISRAEL OTTOHELP 236 PCS Jun 2023 (October 2023): Stealer Log Summary

• Records Exposed: 5,552
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: October 18, 2023

23.5 Records Per File: Reading the Density

The 236 PCS June batch sits at approximately 23.5 records per file -- notably higher than the 58 PCS June batch's ~21.0 and considerably above the lowest-density batches in the series (September and October, around 14.0-14.5). Higher per-file density generally reflects endpoints with more stored credentials: users who rely heavily on browser autofill, password managers with browser integration, or machines with longer browsing histories. The 236 PCS batch's density suggests a collection sweep that encountered more credential-rich endpoints than the operator's larger-volume, lower-density September release.

Combined June Exposure: 6,769 Records From Two Batches

The 236 PCS batch does not stand alone. Combined with the 58 PCS June 2023 batch, DAMN_ISRAEL OTTOHELP released a total of 6,769 US credentials from June 2023 collection alone -- across 294 individual log files representing at least 294 compromised US endpoints. Viewed together, the two June batches make June one of the higher-volume months in the DAMN_ISRAEL OTTOHELP archive, ahead of February (1,382) and May by record count. The dual-batch structure for June is unique in the series and may reflect the operater's approach to organizing data from different source infrastructure separately before the October 18 dump.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records, including stealer log data from the DAMN_ISRAEL OTTOHELP October 18 archive release. If your credentials appeared in either June 2023 batch or any other batch in the series, a free scan at HEROIC's breach scanner can confirm whether your data is in the index.