8M Plaintext Passwords From Telegram Alien ULP P693

HEROIC analysts identified the Telegram Alien ULP P693 stealer log in a public Telegram channel on January 19, 2025. The single file, titled @TXTLOG_ALIEN - 693.txt, contains more than 51.1 million lines of harvested data and exposes 8,064,258 unique email addresses paired with plaintext passwords and the homepage URLs where those logins were used.

Why the Alien ULP P693 Log Is Dangerous

Plaintext passwords are the worst case for any victom. There is no hash to crack and no salt to slow attackers down. A criminal can open the file, copy a username and password, and attempt to sign in to your email, banking, or social accounts within seconds. Because the log also maps each credential to the exact website it was used on, the guesswork is removed for whoever buys or downloads it.

What Was Exposed in the Telegram Alien ULP P693 Log

• Email addresses
• Plaintext passwords
• Homepage URLs tied to each login

Why This Matters

Stealer logs feed directly into credential stuffing tools. Attackers take the leaked email and password combinations and spray them across thousands of popular sevices. If you reuse passwords, a single entry in this log can unlock your inbox, your payment apps, your cloud storage, and your work accounts. From there, identity theft, wire fraud, and account takeover follow quickly.

How Stealer Logs Like Alien ULP P693 Work

Stealer logs are produced by infostealer malware running on infected computers. Once a device is compromised, the malware copies saved browser passwords, session cookies, autofill data, and form entries, then ships everything to a command and control server. Operators bundle the results into text files and distribute them through private Telegram channels and dark web forums. The Alien ULP series is one of the larger ongoing collections, and P693 is a fresh installment in that line.

Check If You Are Affected

HEROIC maintains a breach intelligence database of more than 400 billion records, including stealer logs like this one. Run a free scan to see if your email address, password, or login history appears in the Telegram Alien ULP P693 dataset or any related leak.