LeakBase xCloud ULP #500: Someone Could Be In Your Accounts Now

HEROIC analysts flagged a stealer log titled "xCloud ULP #500," linked to the actor kibertolog, after it surfaced on a hacking forum on June 21, 2024. The log contains 192,605 unique email addresses, each paired with a plaintext password and the website where that login was captured.

Why This Is Dangerous

Picture someone opening this file, typing in your email address, and finding your password sitting right next to it in plain text alongside the site you used it on. That is exactly what this leak hands to anyone who downloads it. There is no cracking required, no waiting, just an instant match between your login and the account it unlocks.

What Was Exposed

• Email addresses
• Plaintext passwords
• Homepage URLs (the site each login was used on)

Why This Matters

With 192,605 logins in this log, an attacker does not need to guess who to target next, they simply run every pair through automated tools that test the same email and password combination against banking sites, email providers, and social media platforms. If you reused this password anywhere else, someone could be logging into your other accounts right now without you knowing.

How Stealer Logs Work

This data comes from information-stealing malware, software quietly installed on a victim's computer through a fake download, pirated program, or malicious attachment. The malware pulls saved login details straight from the browser and sends them to the attacker, which is why each entry in this log includes not just an email and password but also the website where it was used. Because the malware infects the device rather than a single company's servers, a stealer log like "xCloud ULP #500" can contain logins scraped from hundreds of different sites all at once.

Check If You Are Affected

Do not wait to find out the hard way. HEROIC's free breach scanner checks your email against more than 400 billion exposed records, including this stealer log, so you can see in seconds if your login needs to change.