U.S. Users Targeted: DVDCLOUD Exposes 8,086 Passwords

HEROIC discovered a stealer log collection labeled DVDCLOUD distributed through Telegram channels, originally leaked in February 2024. The dataset contains 8,086 compromised records predominantly from United States-based users, with credentials harvested directly from infected devices by infostealer malware.

Plaintext Passwords Offer No Protection

The credentials in the DVDCLOUD dump are stored in plaintext with no encryption or hashing applied. This means anyone who accesses the file can read usernames and passwords in plain English. There is no computational barrier, no decryption step, and no time delay between obtaining the data and using it to log into victims' accounts.

What Was Exposed

• Email Addresses — used as login identifiers across multiple platforms and as vectors for targeted phishing campaigns
• Plaintext Passwords — credentials stored in readable text, immediately exploitable without any cracking effort
• URLs — the web services and login portals where each credential was originally captured

How Password Reuse Multiplies Your Risk

When criminals obtain a working email-password pair, they immediately test it against dozens of high-value targets: banking websites, corporate email systems, cloud storage providers, and social media platforms. Studies consistently show that more than half of internet users reuse passwords across services. For anyone in the DVDCLOUD dump who shares a password between accounts, a single exposed credential could lead to cascading compromises across their entire digital footprint.

Stealer Logs: The Silent Threat on Your Device

Infostealer malware is responsible for generating the credentials found in this leak. These programs infect devices through seemingly harmless downloads, browser extensions, or email links. Once active, they operate invisibly, extracting saved login credentials from web browsers, siphoning authentication cookies, and harvesting autofill data. The stolen information is then compiled into structured log files and uploaded to Telegram channels where they are sold or given away to other cybercriminals.

Check If Your Credentials Were Exposed

With more than 400 billion breach records in its database, HEROIC can help you determine whether your email address or password appeared in the DVDCLOUD dump. Run a free scan with HEROIC's breach checker and take immediate steps to change any compromised credentials.