Our Analysts Found the SunCloudNew 1790 Log With 1,865 Records

HEROIC analysts discovered a stealer log package called "SunCloudNew 1790 - 400 LogsFile" circulating on Telegram, uploaded on August 2, 2026. The file contains 1,865 records, including email addresses, plaintext passwords, and the URLs or API hosts those credentials were tied to, all captured from infected devices.

Why the SunCloudNew 1790 Log Is Dangerous

Because this data was pulled directly from malware-infected computers, it includes exactly which sites the 1,865 victims were logged into and the passwords they were using at the time. There is no cracking needed, since the passwords are already in plaintext, and the paired URLs tell an attacker exactly where to try each set of credentials first.

What Was Exposed in This Stealer Log

• Email addresses
• Plaintext passwords
• URLs and login endpoints tied to each credential

Why This Matters for the 1,865 Accounts Involved

If your information is part of these 1,865 records, it means a device you used was infected with malware that successfully captured your login details. Because people often reuse the same password across multiple accounts, this single exposure can lead to credential stuffing attempts against your email, banking, or social media accounts, and ultimately account takeover or financial fraud.

How Stealer Logs Like SunCloudNew 1790 Are Made

Stealer log malware infects a device, often through a fake download, cracked software, or a phishing link, then quietly collects saved passwords, browser autofill data, and login sessions before sending them to the attacker. The "400 LogsFile" naming suggests this is one numbered release in an ongoing series, with sellers on Telegram distributing fresh batches of infected logs to buyers looking for working credentials.

Check If You Are Affected

With 1,865 records tied to this stealer log, checking your exposure takes only a moment. HEROIC's free breach scanner searches your email against a database of more than 400 billion leaked records, including logs like SunCloudNew 1790, so you can find out if you are affected and secure your accounts before someone else does.