TOR_LOG US Breach Exposed 4,186 Stealer Log Records
Opening: HEROIC researchers found 4,186 records on February 18, 2023 from TOR_LOG US, an early US-focused stealer log uploaded to a public Telegram channel under the abbreviated TOR_LOG brand.
Why This Stealer Log Is Dangerous
TOR_LOG US targets American users and US-based web services, meaning the 4,186 leaked credentials line up with major consumer platforms, banking portals, and corporate webmail used across the country. Every password sits in plaintext next to its exact login URL, so attackers can pivot from the file to a live account in minutes. This older drop predates the newer TOR_LOG UNITED STATES collection, yet the credentials still fuel modern credential stuffing bots.
What Was Exposed in TOR_LOG US
- Email addresses
- Plaintext passwords
- Login URLs and API host endpoints
- US-weighted service identifiers for banking, retail, and SaaS platforms
- Endpoint context from infected machines
Why This Matters
US-focused stealer logs are the raw fuel for account takeovers, tax fraud, and business email compromise. Because TOR_LOG US is an older volume, many victims have never been notified, and their reused passwords still work on newer services. If you maintained the same password across multiple sites since 2023, you should assume it has been tested on dozens of US platforms already.
How a Stealer Log Like TOR_LOG US Works
Infostealer malware reaches US endpoints through cracked software, fake installer ads, and phishing attachments. Once running, it harvests browser passwords, cookies, autofill data, and crypto wallet files, then reports back to the operator. Curators segment the haul by country, labeling the US portion as TOR_LOG US, and publish it on Telegram for resellers and scrapers.
Check If You Are Affected
HEROIC scans 400B+ exposed records across stealer logs, combolists, and dark web markets. Run a free scan to see if your email or passwords appear in TOR_LOG US or any related US Telegram drop, and rotate exposed credentials before attackers act.
Breach Breakdown
4,186 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)