XBOX 200X Stealer Log: 162 Gaming Accounts Compromised

What Happened

On December 30, 2025, threat actors released XBOX 200X stealer log containing 162 compromized Xbox Live gaming account credentials via Telegram. The dump included plaintext passwords and email addresses associated with Xbox user accounts, indicating active malware targeting gaming platform users.

The Real Danger

Gaming account compromise goes beyond entertainment. Xbox Live accounts link to Microsoft accounts, which provide access to email, OneDrive cloud storage, business applications, and payment methods. Plaintext passwords enable immediate account takeover and potential access to linked enterprise services.

Exposed in This Breach

• 162 Xbox Live gaming account credentials
• Plaintext passwords stored in readable format
• Associated email addresses and Microsoft accounts
• Game library and subscription information URLs

Why This Matters

Gaming platforms are increasingly targeted by credential stealers because they link to financial information and broader account ecosystems. An Xbox account compromise can lead to unauthorized purchases, chat hijacking, and pivoting to linked Microsoft services. This represents gateway access to more valueable systems.

How Stealer Malware Targets Gamers

The XBOX 200X malware specifically harvests credentials from gaming platform autologin systems, launcher caches, and browser credentials managers. Gaming systems often have weaker security practices and stored session tokens that make credential extraction trivial. The stolen data gets repackaged for sale to fraud rings.

Steps to Secure Your Gaming Account

If your Xbox account email apears in this dump, change your password immidiately using a unique, complex passphrase. Enable two-factor authentification on your Microsoft account. Review purchase history and subscriptions for unauthorized items. Scan your gaming PC for malware and disable autologin features immediately.