Exposed: COMBOLIST 823K QQ.COM FRESH 100 uploaded by a Telegram User

In October 2025, HEROIC analysts identified a combolist posted to Telegram under the name "COMBOLIST 823K QQ.COM FRESH 100," containing 220,451 exposed records. The listing's name suggests it was pulled from a much larger pool of roughly 823,000 QQ.com accounts and filtered down to the batch marked "fresh" and confirmed usable, each entry pairing an email address with a plaintext password and the login URL it was captured from.

What an Attacker Can Do With This List

With more than 220,000 working email and password pairs in hand, an attacker does not need to hack anything else, they simply try each login. Automated tools can attempt every credential in the file within minutes, and because the list is labeled "fresh," the odds that a given password still works are much higher than with an old, recycled dump.

What Was Exposed

• QQ.com email addresses
• Plaintext passwords
• Login URLs tied to each credential pair

Why This Matters

A combolist this size is built for credential stuffing, feeding leaked email and password combinations into automated tools that test them against banking, shopping, and other email accounts. Anyone in this list who reused their password elsewhere faces a real risk of account takeover, and depending on what other accounts share that password, identity theft or financial fraud can follow.

How an 823K Combolist Becomes 220K Fresh Records

Combolists usually start as raw collections of email and password pairs gathered from stealer malware or earlier breaches. Sellers then run automated login checks against the original accounts, discarding anything that no longer works and keeping only the confirmed, currently active credentials. That is how a claimed 823,000-record source list was narrowed down to the 220,451 verified records in this "fresh" batch.

Check If You're Affected

Whether you use a QQ.com account or any other email provider, the only way to know if you are part of a leak like this is to check. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can see your exposure in seconds and update any compromised passwords right away.