UHQ MIX PART 5 Exposed 99,816 Stolen Accounts on the Dark Web

HEROIC analysts identified this stealer log on 09-Mar-2023. The breach exposed 99,816 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as UHQ MIX PART 5 0903 2 uploaded by a Telegram User.

Why This Is Dangerous

UHQ, short for Ultra High Quality, is a term used in cybercriminal communities to describe credentials that have been verified as valid and active. This set of 99,816 records contains plaintext passwords, meaning attackers have working email and password pairs ready to use without any additional processing. The mix of accounts from multiple sources increases the reach of potential attacks.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A breach of nearly 100,000 high-quality credentials enables criminals to run large-scale credential stuffing attacks, testing each email and password pair across banking sites, streaming platforms, shopping accounts, and social media. Successful logins lead to unauthorized purchases, drained financial accounts, and stolen personal information. Victims can face months of recovery from the resulting identity theft and fraud.

How Stealer Logs Work

Stealer logs are collections of data harvested by infostealer malware. This malware infects computers through phishing emails, fake download pages, and malicious browser extensions. Once installed, it captures login credentials from browsers, email clients, and applications, then transmits the data to criminals who organize it by quality and distribute it through private Telegram channels and dark web forums.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. Free, takes seconds.