HEROIC Analysts Discover VIP_ULP Free Dump With 121,190 Logins

HEROIC analysts came across a new stealer log dump being passed around under the name "VIP_ULP Free." Unlike some leaks that get sold behind a paywall, this one is exactly what the name suggests, a batch of 121,190 stolen records handed out at no cost to anyone wich wants it.

Why This Is Dangerous

Free access means wider distribution, and wider distribution means more people testing the credentials inside. There's no barrier stopping a curious teenager or a seasoned criminal from grabbing this file and trying every single login becuase it cost them nothing to obtain.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs tied to each login
• 121,190 total records

Why This Matters

When analysts flag a dump like this, it usually means the data is fresh enough to still work. Passwords that are months or years old often stop being useful once people change them, but a recently discovered free dump is far more likely to contain logins people still recieve emails through today.

How Stealer Logs Work

Stealer malware infects a device, quietly pulls saved browser credentials, and ships the data back to whoever is running the campaign. From there, some operators sell the results, while others release smaller batches for free to build reputation on Telegram channels, which appears to be exactly what happened here.

Check If You Are Affected

Since this dump is being shared widely and at no cost, checking your exposure matters more than usual. HEROIC's free breach scanner searches more than 400 billion leaked records so you can find out quickly whether your email is part of this discovery.