eastky.net Leak Puts 5,367 Accounts at Risk of Takeover

In June 2026, HEROIC analysts found a stealer log dump tied to eastky.net that had been uploaded to Telegram by a threat actor. The file contained 5,367 records, including email addresses, plaintext passwords, and the URLs of the sites those credentials were used on.

Why This eastky.net Stealer Log Is Dangerous

The danger here comes from how complete each record is. Rather than just a list of emails or just a list of passwords, this log pairs plaintext passwords directly with the exact web address they unlock. That means an attacker does not need to guess which site a password belongs to or try to crack anything, they can simply plug the credentials into the matching login page and see if it works.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs linked to each set of credentials

Why This Matters

With ready-to-use email, password, and URL combinations, attackers can attempt account takeover on the exact services these 5,367 records point to. If any of those passwords were reused elsewhere, credential stuffing tools let attackers try the same login across many other sites at once, so the risk can quickly spread beyond the accounts named in this leak.

How Stealer Logs Work

Stealer logs are created by malware that infects a computer and quietly copies saved browser passwords, autofill data, and the URLs tied to them, then sends that stolen information back to the attacker. This kind of leak does not come from a hacked company database, it comes from infected personal devices, which is why the credentials inside are often still active and unchanged.

Check If You Are Affected

Want to know if your email or password turned up in this stealer log or another one like it? HEROIC's free breach scanner searches a database of more than 400 billion leaked records so you can check your exposure and update any reused passwords right away.