Telegram alien ULP P799 Stealer Log: 9.28M Logins Exposed

HEROIC indexed 9,283,525 unique records from the Telegram alien ULP P799 by alien leak on March 13, 2025. Shipped through a Telegram distribution channel as TXTLOG_ALIEN - 799, the file formed a 55.1 million line URL:LOGIN:PASS release, closing out the P799 position before the P800 series launch the same day.

Why This Stealer Log Is Dangerous

Back-to-back releases like P799 followed immediately by P800 saturate the credential stuffing market with fresh material. Even partial overlap across releases compounds risk for any victim whose machine appeared in multiple logs. For US services, the density of live credentials per URL is usually highest in the first days after publication.

What Was Exposed in the Telegram alien ULP P799

• 9,283,525 unique email addresses
• Plaintext passwords from browser credential stores
• Homepage URLs for the matching service
• Active login pairs across US banking, retail, and SaaS tools

Why This Matters

Plaintext URL:LOGIN:PASS records bypass cracking entirely and allow automated stuffing tools to hit exact targets. Affected users may see drained PayPal and crypto wallets, hijacked email accounts, fraud on saved payment methods, and unauthorized tax filings during US tax season.

How a Stealer Log Dump Works

Infostealers like RedLine, Vidar, Lumma, and StealC infect devices through cracked software, malvertising, and phishing. Once running, they harvest browser credentials, cookies, autofill data, and crypto wallets, transmitting everything to a collector. The actor alien then packages victim logs into numbered ULP parts and publishes them through Telegram and BreachForums.

Check If You Are Affected

Rotate browser-saved passwords, enable multi-factor authentication on banking, email, and workplace logins, and run a trusted antivirus scan to clean out active infostealer infections. Use the HEROIC scanner, indexing more than 400 billion breached records, to check whether your email surfaces in the Telegram alien ULP P799.