Breach Intelligence Report 18 Jun 2025

Act Fast: Telegram KeyCloud Bonus Logs #4 by .boxed.pw Dumps 10,796 Fresh Stealer Records

HEROIC
HEROIC Threat Intelligence Team
Email Address Username Ip Credit Card Plaintext Password Homepage Url
Your email may be in this breach. Check in 5 seconds — free, no signup required.
Scan Email →
Records Exposed 10,796
Source Type Stealer log
Origin Telegram
Password Type Plaintext

Telegram KeyCloud Bonus Logs #4 by .boxed.pw surfaced on June 12, 2025 as KeyCloud_Free_Bonus_logs#4, a 10,796-record stealer log distributed free to the channel's subscribers. Bonus drops between the numbered weekly releases are .boxed.pw's way of keeping its audience engaged, and they contain the same plaintext passwords and credit card data as the primary releases.


Why KeyCloud Bonus Logs #4 Is Dangerous Right Now

Stealer logs have a short window of maximum value. The first 48 to 72 hours after a drop is when sessions are still live, credit cards have not been canceled, and victims do not yet know they have been compromised. Bonus Logs #4 has been public since June 12, 2025, which means it has already passed through thousands of attacker hands, but any account that has not been rotated since remains exploitable.


What Was Exposed in KeyCloud Bonus Logs #4

  • Email addresses
  • Usernames
  • IP addresses
  • Credit card numbers
  • Plaintext passwords
  • HomePage URLs for every credential
  • 10,796 infected endpoint records

Why This Matters

A 10,796-record log is large enough to seed weeks of credential stuffing, business email compromise, and crypto wallet drain attempts. Every day a victim delays rotating their passwords, the window for abuse stays open.


How the KeyCloud Bonus Drop Cycle Works

.boxed.pw alternates between numbered mainline releases and themed bonus drops like Bonus Logs #4. The pattern keeps attention on the channel, builds a perception of abundance, and pushes casual users toward paid-tier subscriptions. Every bonus release follows the same infostealer-to-Telegram pipeline that feeds the mainline KeyCloud series.


Check If You Are Affected

Do not wait. Search HEROIC.com's database of over 400 billion exposed records right now to see whether your email and passwords are in Telegram KeyCloud Bonus Logs #4 or any other .boxed.pw release. If they are, rotate every reused password and revoke active sessions immediately.

Breach Breakdown

Domain N/A
Leaked Data Email Address, Username, IP Address, Credit Card, Plaintext Password, HomePage URL
Password Types Plaintext
Date Leaked 18 Jun 2025
Check in 5 seconds

10,796 passwords exposed. Is yours one of them?

Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.

All information submitted is Private and Secure. We do not sell or share email addresses. By searching, you agree to HEROIC's Privacy Policy and Terms of Service.

Free forever · No account required · Results in seconds

Private & Secure No Account Needed 2,975 scanned today
Breach Rank #15,516 by affected users
Impact Score
0
sensitivity + scale + recency
Est. Financial Impact $78.1K fraud, phishing & misuse risk
Scan your email Free →
Scan to sign up

Scan to sign up instantly

24/7 Dark Web Monitoring
Instant Breach Alerts
Secure Data Protection
Your Data is at Risk

Your Personal Information is Exposed

We found your data exposed in multiple breaches. This includes:

  • Email addresses
  • Passwords
  • Phone numbers
  • Financial information
Secure My Information Now

Your information is protected by enterprise-grade security

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance