Dark Web Intel: LulzSecCloudNew Leak Exposes 60,777 Logins

HEROIC analysts identified a stealer log tied to a source labeled LOGSYNC LulzSecCloudNew uploaded to a public Telegram channel on May 28, 2025. The file exposed 60,777 compromised records from devices in the United States, including email addresses, plaintext passwords, and the URLs of the login pages the credentials belonged to.

Why This Is Dangerous

Every password in this log was captured and stored in plaintext, so there is no encryption for an attacker to break. Each of the 60,777 records pairs a working email address with its exact password and the site it unlocks, giving anyone who obtains this file everything needed to attempt tens of thousands of logins immediately.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

A log this size is exactly what dark web intelligence teams watch for, since it becomes fuel for credential stuffing the moment it circulates. Attackers automatically test stolen email and password pairs against banking sites, email providers, and social media platforms. Because these passwords were exposed in plaintext, the only real defense is whether the password was reused elsewhere, and where it was, the path runs straight to account takeover, identity theft, and financial fraud.

How This Stealer Log Was Created

Logs like this one, tracked here as LOGSYNC LulzSecCloudNew, come from information-stealing malware that infects a device through a cracked application, pirated download, or malicious link. Once active, the malware pulls saved usernames and passwords directly out of the browser, along with the exact URL of every site those credentials belong to, and compiles it all into a single file. That file is then shared on Telegram, where it becomes available to anyone in the channel.

Check If You Are Affected

Stealer logs like this one are especially dangerous because the credentials inside are current and unencrypted. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including stealer logs like this LOGSYNC LulzSecCloudNew upload, so you can find out quickly whether your information was part of this exposure.