Hotmail Fresh B4_Jx uploaded by a Telegram User: 455 Accounts Targeted

HEROIC analysts identified a combolist titled "Hotmail Fresh B4_Jx," uploaded to a Telegram channel on April 18, 2026. The file contains 455 records pairing Hotmail email addresses with plaintext passwords, along with the URLs of the accounts they unlock.

Why Hotmail Users Are the Target Here

The uploader labeled this list "fresh," meaning the credentials were harvested recently rather than recycled from an old breach. Because every entry in the file is a Hotmail account, an attacker working through this list knows exactly which email provider to target, making it easy to focus follow-up attacks like phishing emails or account recovery abuse on Microsoft's login system specifically.

What Was Exposed

• Hotmail email addresses
• Plaintext passwords
• Account login URLs

Why This Matters

A "fresh" label suggests these 455 credentials are more likely to still be active than passwords pulled from an older leak. If your Hotmail password appears here, and you have used it anywhere else, attackers can pivot from your inbox into other accounts, since email access is often the key to resetting passwords elsewhere. That opens the door to account takeover, financial fraud, and identity theft.

How Combolists Work

A combolist pairs email addresses or usernames with matching passwords, usually gathered from phishing pages, malware infections, or earlier leaks and then organized by email provider for easier targeting. Labeling a list by provider, as this one does with Hotmail, lets attackers run the credentials directly against Microsoft's login page instead of guessing which service each account belongs to.

Check If You Are Affected

With 455 Hotmail credentials now circulating, it takes only a moment to check if yours is one of them. HEROIC's free breach scanner searches more than 400 billion leaked records, including this combolist, so you can find out right away if your email and password were exposed and secure your account before someone else does.