Someone Could Be Logging In With Your Outlook Part2 7 Password

HEROIC's threat intelligence team identified a combolist named Outlook Part2 7 circulating on Telegram, dated May 7, 2023. The file contains 9,892 records pairing email addresses with plaintext passwords and the URLs those logins belong to.

Why the Outlook Part2 7 Leak Is Dangerous

Because every password in this file is stored in plaintext, anyone who downloads it can try each email and password combination on other websites right away. If a person in this list reused their password anywhere else, an attacker can log in as them without any extra effort.

What Was Exposed in the Outlook Part2 7 Combolist

• Email addresses
• Plaintext passwords
• URLs of the websites or services the credentials belong to

Why This Combolist Matters

Nearly 10,000 credential pairs is more than enough to fuel automated credential-stuffing attacks. If any of the accounts in this file reuse their password on an email or financial account, an attacker can take over that account and use it to reset other passwords or attempt fraudulent purchases.

How a Combolist Like This Works

A combolist pairs usernames or emails with passwords, usually collected from older leaks, stealer logs, or previous credential-stuffing attempts, into a single file. Once assembled, these lists circulate on Telegram and dark web forums, where buyers run them through automated tools against major websites, hoping some percentage of the reused passwords still work.

Check If You Are Affected

HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including combolists like Outlook Part2 7. If you find a match, change that password immediately and turn on multi-factor authentication wherever it is offered.