The FR NEW 0818 Leak Exposed 91,827 Stolen Accounts on the Dark Web

HEROIC analysts identified this Stealer log on 24-Feb-2023. The breach exposed 91,827 records, with stolen data including Email Addresses, Plaintext Passwords, and URLs. The source is identified as FR NEW 0818, uploaded by a Telegram User.

Why This Is Dangerous

The FR NEW 0818 stealer log contains nearly 92,000 plaintext email and password pairs, likely targeting French-speaking users. Because the passwords are stored in plain text, attackers can use them immediately to attempt logins on email services, banking portals, and social media accounts without any additional processing.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Nearly 92,000 credential pairs give attackers a sizable list of accounts to target. Credential stuffing attacks using this data can lead to unauthorized account access, financial fraud, and identity theft. Users who reuse the same password across multiple sites face the highest risk of being affected.

How Stealer Logs Work

Stealer logs are assembled from data collected by malware that infects victims' computers. The malware silently captures usernames, passwords, and the web addresses of the sites users visit. This information is then compiled into files and shared through Telegram channels, where criminal groups buy and sell stolen credentials.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.