HEROIC Found Hotmail Fresh B4_Jx in Private Telegram Channels

HEROIC analysts identified this stealer log on April 2, 2026. The breach exposed 15,306 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as Hotmail Fresh B4_Jx uploaded by a Telegram User.

Why This Is Dangerous

This stealer log targets Hotmail accounts specifically and is labeled fresh, meaning the credentials were recently collected and are highly likely to still be active. With 15,306 stolen Hotmail email addresses and plaintext passwords now in circulation, attackers have an extensive list of real, working Microsoft account credentials. Hotmail and Outlook accounts are gateways to Microsoft 365 services, cloud storage, and linked applications, making them high-value targets.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

With 15,306 stolen fresh Hotmail credentials on the dark web, the scale of risk is significant. Victims face unauthorized access to their Microsoft accounts, identity theft, financial fraud if billing information is linked to the account, and credential stuffing attacks on any other platform where the same password is used. Fresh credentials give attackers an advantage, as affected users are less likely to have changed their passwords yet.

How a Stealer Log Works

Stealer malware targets specific email providers by extracting saved passwords and browser session data from infected devices. When the malware focuses on a single provider like Hotmail, the resulting log is highly organized and immediately useful to attackers looking for access to that platform. The B4_Jx identifier in this log's name is a marker used by the operator to track the batch. These logs are distributed through private Telegram channels before reaching public dark web forums.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to see if your credentials appear here or elsewhere. Free, takes seconds.