The LOGS_CENTER Stealer Log Quietly Exposed 8,717 Passwords

HEROIC analysts found a stealer log file, branded "LOGS_CENTER," uploaded to a public Telegram channel on August 5, 2023. There was no fanfare, no announcement, just 8,717 records quietly added to a channel already trading in stolen credentials. The file paired email addresses with plaintext passwords and the URLs of the login pages they unlock.

Why the LOGS_CENTER Leak Is Dangerous

Because the passwords in this file are stored in plaintext and matched directly to the URL each one unlocks, no cracking or guessing is required. Anyone who comes across this quiet upload can pick a record, open the listed URL, and log in immediately.

What Was Exposed in the LOGS_CENTER Leak

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

All 8,717 records came from the same malware infection event dated August 5, 2023.

Why This Matters if You Are in the File

Quiet leaks like this one are often more dangerous than loud ones, because fewer people notice them and act. If your password shows up here and you reused it anywhere else, an attacker can use credential stuffing to try that same login across email, banking, or shopping accounts, potentially leading to account takeover, identity theft, or financial fraud.

How Stealer Log Leaks Like LOGS_CENTER Work

A stealer log comes from infostealer malware that infects a device, often through a phishing link or a cracked software download. Once running, it quietly copies saved browser passwords and the URLs tied to each login, bundles everything into a log file, and that file gets uploaded to channels like the one where HEROIC found this data.

Check If You Are Affected by This Leak

If you want to know whether your email or passwords appear in this or any other stealer log, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records. Run a free scan and change any passwords you have reused elsewhere.