The SafeSocks5_bot Twitch Dump Just Got Added to Our Breach Database

In February 2023, HEROIC identified a stealer log file named SafeSocks5_bot Twitch, uploaded to Telegram by an anonymous user. The log contained 288 stolen credentials harvested from infected devices, including email addresses, plaintext passwords, and associated URLs. The file circulated freely on Telegram before HEROIC indexed it in our breach database.

Why the SafeSocks5_bot Twitch Breach Is Dangerous

Even smaller stealer logs carry significant risk because attackers use automated tools to test every credential set at scale. With 288 plaintext credential pairs available, attackers can immediately test these against email providers, banking platforms, and social media without any decryption step. Stealer logs distributed openly on Telegram reach multiple criminal groups simultaneously, multiplying the number of actors who can exploit these credentials.

What Was Exposed in the SafeSocks5_bot Twitch Leak

• Email Addresses
• Plaintext Passwords
• URLs

Why This SafeSocks5_bot Twitch Data Puts You at Risk

Plaintext passwords require no cracking and can be used immediately in automated credential stuffing attacks. A successful match on an email or financial account enables attackers to reset passwords on all connected services, leading to identity theft, unauthorized financial transfers, and long-term account takeover. Users who reuse passwords across platforms face compounded risk from any stealer log exposure.

How Stealer Logs Work

Stealer logs are produced by infostealer malware distributed through phishing emails, trojanized software, and malicious downloads. Once installed, the malware silently extracts saved browser credentials, autofill data, and locally stored passwords, packaging them into compressed log files transmitted to the attacker and then uploaded to Telegram for sale or free distribution.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the SafeSocks5_bot Twitch leak or thousands of other breaches in our database.