30,797 Passwords From the QLogs VIP 2970 PCS Dump Just Surfaced

HEROIC analysts identified a stealer log package called "QLogs VIP 2970 PCS 22-07-2026," uploaded by a Telegram user on August 1, 2026. The file contains 30,797 records, including endpoint information, email addresses, API hosts, and plaintext passwords pulled directly from infected computers.

Why the QLogs VIP 2970 PCS Dump Is Dangerous

Unlike a typical password list, stealer log data like this comes straight from malware running on someone's computer, which means it can include the exact websites and services a victim was logged into at the time of infection. With email addresses, API hosts, and plaintext passwords all bundled together, an attacker gets a ready-made map of which accounts to target and working credentials to try on each one.

What Was Exposed in This Stealer Log

• Email addresses
• Plaintext passwords
• URLs and API host endpoints tied to each set of credentials

Why This Matters for the 30,797 Records Involved

If your information is among these 30,797 records, it means malware was likely present on a device you used to log into your accounts, and it captured your passwords in the process. Because attackers can use these credentials immediately, victims face a real risk of credential stuffing, account takeover, and identity theft, especially if the same passwords are reused on banking or email accounts.

How Stealer Logs Like QLogs VIP Are Built

Stealer log malware infects a device, often through a fake download, cracked software, or phishing link, and then quietly collects saved passwords, browser autofill data, and login sessions before sending everything back to the attacker. The stolen data is packaged into a "log" per infected machine and often sold or shared in bulk, as appears to be the case with this 30,797 record collection labeled QLogs VIP. These logs are popular on Telegram because they provide fresh, working credentials rather than old, previously exposed passwords.

Check If You Are Affected

With 30,797 records circulating from this stealer log, checking your exposure is worth doing right away. HEROIC's free breach scanner searches your email against a database of more than 400 billion leaked records, including stealer logs like QLogs VIP 2970 PCS, so you can see if your credentials were caught and take action to secure your accounts.