BRIEFLeaklowP38
2.7 GB of fresh stealer logs leaked
Detected13 September 2026 · 00:12 UTC
A 2.7 GB batch of freshly harvested stealer logs (URL:email:password) was posted on 12 September 2026, containing credentials captured from infected machines. No single organization is named, but a dump this size feeds credential-stuffing and account-takeover campaigns, so defenders should hunt for reuse of corporate emails and force rotation of any exposed passwords.
CategoryLeak
Severitylow
Priority score38
Detected13 September 2026 · 00:12 UTC
Leak● 28
Volcado de credenciales ULP de 27 millones de líneas (1,5 GB)A 1.5 GB credential dump labelled 'ULP' containing roughly 27 million URL:LOG:PASS lines was posted to DarkForums in March 2026. These email/password pairs feed credential-stuffing and account-takeover attacks across many services. Defenders should check exposure of corporate and government accounts, though the dump is months old and not directed at a specific entity.Leak● 40
Filtración de 6,95 millones de logs URL:LOG:PASS (DAXUS)A 6.95 million-line URL:LOG:PASS stealer-log dump was uploaded to DarkForums and advertised by the handle DAXUS. Such logs hold live credentials harvested by infostealers and are used for account takeover and VPN/SSO intrusion. No single victim is named, so it is a broad credential-exposure alert rather than a targeted access sale.Leak● 48
Filtración de base de datos de prisioneros iraquíesA DarkForums thread shares an alleged database of Iraqi prisoners containing identifying and detention data. If genuine, it is a sensitive government and national-security leak affecting detainees and officials. The post is undated so freshness is unconfirmed, but the subject matter warrants monitoring.Leak● 65
Filtración expone a 70.000 agentes de inteligencia de MarruecosA leak dubbed 'Jabaroot' exposes roughly 70,000 personnel of Morocco's Directorate General for Territorial Surveillance (DGST), including identities and contact data. It is a serious counter-intelligence breach against a foreign state service, published around 24 Aug 2026 and still circulating. Though outside Latin America, it is a high-value state dataset that enables targeting and should be tracked.Leak● 76
Base de datos de la Policía Nacional del Reino Unido a la ventaThe seller evilfoo is advertising the UK Police National Legal Database, a sensitive law-enforcement dataset, for sale on DarkForums. Leaked police data can fuel doxxing, impersonation and targeting of officers and legal staff. Posted in August 2026, this is a fresh and high-impact government leak worth prioritizing.Leak● 76
Base de datos del Ministerio de Educación del Reino Unido (education.gov.uk) a la ventaA seller on DarkForums is offering the UK Department for Education (education.gov.uk) database for sale. Government education records can expose student, staff and safeguarding data, and such sets are frequently resold to fraudsters. The listing is recent (August 2026), so UK public-sector defenders should verify exposure and monitor for reuse.