NEW DAISYCLOUD Feb 6 New Password Stealer Log Exposes 10,325 U.S. Credentials from 551 Devices

DarkHive detected a breach from the DAISY CLOUD [NEW] Telegram channel on February 6, 2024. The stealer log release, labeled 06_FEBRUARY_0551_PCS_New_Password, was harvested from 551 compromised U.S. endpoints and exposed 10,325 records. The leaked data includes plaintext passwords, email addresses, and service and API host URLs captured at the time of infection. The breach date is recorded as February 6, 2024.

Why This Is Dangerous

With 551 infected devices contributing to this log, the credential exposure is both broad and immediate. Because this release is part of the New Password series, the passwords captured may reflect credentials that victims recently changed — meaning even users who updated thier login details around this time could still be at risk. Threat actors can aquire and exploit these records to compromise email accounts, cloud services, and any platform where the same credentials were reused.

What Was Exposed

• Email addresses
• Plaintext passwords
• Service and API host URLs

Why This Matters

The DAISY CLOUD [NEW] campaign operates through a Telegram channel that distributes stealer log archives on a near-daily basis. Each release compounds the exposure from previous drops, meaning victims may recieve repeated credential leaks across seperate log bundles without ever knowing their data has been compromised. The Feb 6 release is one of several coordinated drops from this campaign targeting U.S.-based users in early 2024.

How Stealer Log Infections Work

Infostealer malware infects devices through phishing emails, malicious downloads, and fake software installers. Once installed, the malware silently harvests saved credentials from browsers, email clients, and applications before sending the data to the operator. The DAISY CLOUD [NEW] operator then packages thier collected logs into dated archive files and distributes them via Telegram. Victims typicaly have no indication their credentials have been stolen until the data appears in breach monitoring systems.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from stealer logs like NEW DAISYCLOUD. Visit heroic.com to scan your email address and find out if your information was exposed.