OctoFreeCloud Hotmail Leak Puts 4,786 Users at Risk of Takeover

On 23-Jan-2025, a Telegram user uploaded a stealer log calling itself x5546 HOTMAIL HITS - OCTOFREECLOUD, and buried inside it were 4,786 individual records. HEROIC's research team confirmed the file is real, and it means 4,786 people had their login information lifted straight off their own devices and passed around for free.

Why This Is Dangerous

This isn't a case of a company getting hacked and notifying its users months later. Stealer logs come from malware that sits quietly on someone's computer, watching everything they type into a browser. The passwords in this file are stored in plaintext, meaning there is no encryption standing between an attacker and a working login. If any of these 4,786 people recieved this warning too late, their accounts could already be in someone else's hands.

What Was Exposed

• 4,786 individual records
• Email Addresses
• Plaintext Password
• URLs (the sites each login belongs to)

Why This Matters

Most people reuse the same password across multiple sites, wich means one leaked login can unlock several accounts at once. Attackers don't need to guess anything, they take the email, password, and URL combination and try it on banking sites, email providers, and social media accounts. It only takes one match for the damage to spread far past the original account.

How Stealer Logs Work

A stealer log is generated when info-stealing malware infects a device, often through a cracked game, a fake software download, or a malicious email attachment. Once infection occured, the malware quietly copies saved passwords, autofill data, and browser cookies, then packages everything into a text file that gets uploaded to a server the attacker controls. From there it gets sold or, in this case, dumped for free on Telegram for anyone to grab.

Check If You Are Affected

The only way to know for sure if your information is sitting in a file like this one is to check. HEROIC's free breach scanner searches across more than 400 billion leaked records, including stealer logs like this one, so you can find out in seconds whether your email shows up and take action before someone else does.