The FOXBASEWORLD ULP-357 Leak Exposed 191,813 US Accounts

191,813 US Accounts Exposed in the DAISYCLOUD FOXBASEWORLD ULP-357 Dump

On July 7, 2025, HEROIC threat analysts identified a stealer log labeled UP_DAISYCLOUD - FOXBASEWORLD ULP-357 that a Telegram user had uploaded for wide distribution. The file exposed 191,813 records tied mainly to United States accounts, including email addresses, plaintext passwords, and the URLs of the sites those logins belong to. The ULP-357 tag stands for user, login, and password, the exact format criminals look for because it is ready to use the second it is downloaded.

Why This Is Dangerous

Because the passwords in this dump were never hashed or encrypted, anyone who gets ahold of the file can read them plainly and try them against real accounts right away. If one of these 191,813 people used the same password anywhere else, that account becomes an easy target too. Pairing each password with its matching URL makes the attack even more efficent, since the criminal already knows exactly which site to try it on.

What Was Exposed

• Email addresses tied to US-based accounts
• Plaintext passwords for each account
• URLs showing which website each login belongs to

Why This Matters

Leaks like the FOXBASEWORLD ULP-357 dump are a direct feed for credential stuffing attacks, where automated bots try stolen email and password pairs across banking, retail, and social media sites in bulk. Once an attacker lands one working login, account takeover often follows fast, and from there it is a short step to identity theft and financial fraud, especially if the compromised email is used to reset passwords on other accounts.

How the FOXBASEWORLD ULP-357 Log Was Built

ULP-formatted dumps like this one come from stealer malware that infects a device, usually through a cracked download, fake update, or malicious attachment, and then quietly harvests saved browser passwords, autofill entries, and the web addresses tied to each login. That stolen information gets bundled, labeled with a project name like DAISYCLOUD or FOXBASEWORLD, and shared through dark web marketplaces and Telegram channels where other criminals pick it up to fuel their own attacks.

Check If You Are Affected

If you think your email or password might be part of the FOXBASEWORLD ULP-357 dump or any other breach, it is worth checking before an attacker beats you to it. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, giving you a fast, clear answer on your exposure.