Social Media Users Targeted: Twitter Account Leak Exposed

HEROIC detected a stealer log titled 114 Twitter Accounts By white0storme that was posted on Telegram in December 2022. The file contains 94 records targeting Twitter (now X) users, each pairing an email address with a plaintext password and the login URL. Social media account theft is a growing threat, and this leak hands attackers direct access to real user profiles.

Plaintext Passwords Hand Over Social Media Identities

The passwords in this dataset are stored in plaintext, completely unprotected. For social media accounts, this creates an especially dangerous situation. Attackers can log in instantly, post content as the victim, send malicious links to their followers, or lock the original owner out entirely. No password cracking is needed.

What Was Exposed

• Email addresses linked to Twitter/X user accounts
• Plaintext passwords stored without encryption or hashing
• URLs confirming the credentials are for Twitter/X login pages

Compromised Social Accounts Lead to Identity Abuse

A stolen Twitter account is more than just a nuisance. Attackers use hijacked social media profiles to run scams, impersonate the victim, or send phishing messages to their contacts. If the same password is used for email or banking, credential stuffing extends the damage far beyond social media. Even 94 records can cause widespread harm when each account has an audience.

Why Gamers and Social Media Users Are Prime Targets

The threat actor white0storme specializes in targeting gaming and social media accounts through infostealer malware. These programs infect devices via malicious downloads, fake tools, or phishing emails. Once active, they harvest every credential saved in the victim's browser and package the data into log files for distribution on Telegram channels, creating a steady pipeline of stolen accounts.

Check If Your Credentials Were Exposed

If you use Twitter/X, your account could be at risk. HEROIC's breach scanner covers more than 400 billion compromised records, allowing you to check if your email or password has appeared in any known leak. Search your credentials now, and if they are found, update your Twitter password immediately and turn on two-factor authentication to protect your account.