FreeOLDCloud: How a Stealer Log Leaked 22,062 Passwords

In March 2024, HEROIC analysts logged a stealer dump called FreeOLDCloud after it began circulating on Telegram. At 22,062 records, it is one of the larger stealer logs in this batch, pairing email addresses with plaintext passwords and the exact login URLs those passwords open.

Why the Size of the FreeOLDCloud Leak Makes It Dangerous

With over 22,000 records in one file, the sheer scale means a lot of accounts are sitting exposed at once. Every password is stored in plain text, so there is no encryption slowing an attacker down. Anyone who gets a copy of this file can start testing logins immediately, without needing any special skill.

What Was Exposed in FreeOLDCloud

• Email addresses
• Plaintext passwords
• Login URLs for each account

Why a Leak This Large Matters

A file of this size gives attackers thousands of chances to succeed with credential stuffing, where stolen logins are tested accross banking, retail, and email platforms automatically. Reused passwords are the weak link that turns one exposed account into a full takeover, and from there identity theft and financial fraud become very real possibilities for tens of thousands of people.

What Exactly Is a Stealer Log, and How Did FreeOLDCloud Happen

A stealer log is not a hacked database, it is the output of infostealer malware running on victims' own computers. Once installed, often through a pirated download or a fake update, the malware quietly grabs saved browser passwords, autofill details, and cookies, then sends the haul back to whoever controls it. That data is compiled into a log file, like FreeOLDCloud, and passed around on Telegram channels and dark web forums where anyone can grab a copy.

Check If Your Details Are Inside FreeOLDCloud

With over 22,000 records in play, the odds that your information is affected are worth taking seriously. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, so you can find out quickly and change any passwords that need it.