Moon Logs June 30 Dump: 688 Stolen Logins Posted to Telegram

HEROIC discovered 688 records exposed in the Moon logs - MoonLogsCloud 359count Stealer log breach on 30-Jun-2025. A Telegram user uploaded the archive containing endpoint data, email addresses, API hosts, and plaintext passwords taken from infected machines.

Why This Stealer Log Is Dangerous

Stealer logs bundle every credential a browser has ever stored, which gives attackers instant access to dozens of accounts per victim. The Moon Logs set also includes URLs tied to each login, so criminals know exactly which banking, email, and workplace portals to target first.

What Was Exposed in Moon Logs MoonLogsCloud 359count

• Login credentials (emails and plaintext passwords)
• Browser cookies and session tokens
• Autofill data including addresses and payment details
• Cryptocurrency wallet files and seed phrases
• System fingerprints and device information

Each field turns a single infected device into a full identity profile for sale.

Why This Matters

Even smaller logs like this one feed directly into credential-stuffing tools and phishing kits. Because the passwords are stored in plaintext, no cracking effort is needed, which shortens the time between leak and account takeover. Reused passwords amplify the damage across every service a victim touches.

How a Stealer log Like Moon Logs MoonLogsCloud 359count Works

Info-stealer malware arrives through pirated software, malicious installers, or phishing links. Once executed, it scrapes browsers, crypto wallets, and messaging clients, then ships the harvested data back to operators who repackage it into logs like this one for free public drops or paid resale.

Check If You Are Affected

HEROIC monitors the world's largest breach database with over 400 billion compromised records. Search your email on heroic.com to confirm whether your credentials appear in the Moon Logs MoonLogsCloud 359count dump.