The XBOX Telegram Stealer Log Quietly Surfaced With 122 Logins

Right at the start of January 2026, HEROIC analysts noticed another stealer log quitely appear on Telegram, labeled XBOX uploaded by a Telegram User. Unlike a headline grabbing mega breach, this one slipped by with little attention, exposing 122 records made up of Xbox login emails, plaintext passwords, and the URLs used to sign in.

Why This Is Dangerous: Quiet Leaks Are Often the Most Overlooked

Small leaks like this one rarely make headlines, which is exactly why they're dangerous. Nobody sends out a mass alert for 122 stolen Xbox accounts, so victims often have no idea their credentials are circulating until something goes wrong. Anyone holding this data could log directly into a linked Xbox account, access saved payment methods, or try the same password against the victim's email and banking logins.

What Was Exposed in This XBOX Stealer Log

• Email addresses tied to Xbox accounts
• Plaintext passwords stored without encryption
• Login URLs showing which Xbox endpoint was targeted

Why This Matters: Silence Doesn't Mean Safety

Just because a leak is small and quiet does not mean the risk is small too. These 122 credentials are just as usable in a credential stuffing attack as a leak ten times the size. Attackers frequently target smaller, less publicized logs specifically because victims are less likely to be on alert, giving criminals more time to act before anyone changes a password.

How Quiet Stealer Logs Like This One Spread

Infostealer malware doesn't discriminate by target size, it just quitely collects whatever saved logins it finds on an infected device and ships them off to the attacker. Smaller logs like this Xbox batch often come from a handful of infected machines and get uploaded to Telegram in a steady drip, rather than one big dramatic dump, which is part of why they slip under the radar.

Check If Your Xbox Login Was Quietly Exposed

Just because you haven't heard about this leak doesn't mean it doesn't effect you. HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including this Xbox stealer log, so you can catch a quiet leak before it becomes a loud problem. Scan your email today.