The UHQ Mix Combo Put 24,403 Stolen Email and Password Pairs Online

HEROIC analysts identified this stealer log on 04-Nov-2024. The breach exposed 24,403 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as UHQ Mix combo hqhotmailcomboowner uploaded by a Telegram User.

Why This Is Dangerous

The UHQ Mix Combo carries 24,403 plaintext email and password pairs. UHQ stands for ultra-high quality, a term used in credential theft markets to indicate the passwords have been verified as active and working. Attackers holding this data can immediately attempt to log in to email accounts and, from those inboxes, trigger password resets on every connected service the victim owns, from banking apps to corporate email systems.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

The UHQ Mix Combo breach is larger than most individual stealer logs and poses a significant credential stuffing risk. Attackers can run 24,403 email and password pairs through automated tools in a matter of hours, testing each one against banking apps, retail sites, and corporate logins. Victims whose passwords are reused across multiple accounts face potential financial fraud, identity theft, and account lockout. Because the credentials were labeled ultra-high quality, the probability of a successful unauthorized login is higher than average.

How Stealer Logs Work

A stealer log is the output file created by infostealer malware. These programs infect devices when users open malicious attachments, download software from untrustworthy sources, or click on phishing links. The malware then silently reads the browser's stored login credentials, including email addresses, passwords, and website URLs, and transmits the data to the attacker. After sorting and filtering the logs, attackers share or sell them through private Telegram channels and dark web markets, where buyers use them to carry out account takeover attacks.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records from known breaches. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.