logo

Telegram Combolists and 361M Email Addresses

ID: 7c1227c2-a92c-5f7c-9b54-806c1d0f1c36

STIX ID: report--7c1227c2-a92c-5f7c-9b54-806c1d0f1c36

Feed Name: Troy Hunt – Security Blog

Threat Score
78/100

Date Published: 2024-06-03

Date Updated: 2026-04-19

Author: Troy Hunt

...
...

A researcher supplied 122GB of combolist data scraped from 518 Telegram channels (1,748 files) containing ~361M unique email addresses (151M not previously in HIBP) with associated passwords and site context. Analysis and victim responses confirm the data is genuine and likely obtained via info-stealer malware; the lists are being used for credential stuffing, account takeover and extortion. The author loaded searchable records into Have I Been Pwned to help notify affected users and urges basic security hygiene (unique passwords, password managers, 2FA, device hygiene).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.