Exactly 20,000 Phonepass Logins Exposed in Combo Leak

In early February 2023, HEROIC analysts identified a stealer log posted to Telegram titled 20k UHQ Phonepass combo, containing exactly 20,000 exposed records. Each entry pairs an email address with a plaintext password and the URL of the login page it opens, the standard format of data harvested by infostealer malware from an infected browser.

Exactly 20,000 Accounts in This Phonepass Combo Leak

Unlike many stealer logs that fall short of their advertised size, this file delivered on its name with precisely 20,000 usable records. The label Phonepass suggests these credentials are tied to phone carrier or mobile account portals, meaning the accounts affected may control billing information, phone numbers, and personal contact details in addition to login access.

What Was Exposed in the Phonepass Combo

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

Phone account logins often control two-factor authentication settings, billing details, and personal contact information, all of which are valuable to an attacker attempting identity theft or financial fraud. Anyone in this file who reused their password on other services also faces a risk of credential stuffing and account takeover across those accounts.

How a UHQ Combo Like This Gets Built

Infostealer malware infects a device through a cracked download, pirated app, or malicious attachment, then automatically pulls every saved password and login URL from the browser. Sellers filter these raw logs down to a specific type of account, in this case phone-related services, and label the result UHQ, short for ultra high quality, to market it as reliable and ready to use on Telegram.

Check If You Are Affected

With exactly 20,000 records in this file, checking your exposure takes only a moment. HEROIC's free breach scanner searches a database of more than 400 billion compromised records so you can confirm in seconds whether your email and password appeared in this leak.