> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Stealer Logs - How Easy it is to Gain Access
- URL: https://darkwebinformer.com/stealer-logs-how-easy-it-is-to-gain-access/
- Published: 2024-10-21T19:35:46.000Z
- Updated: 2025-09-04T22:25:51.000Z
- Author: Dark Web Informer
- Tags: Intel & Recon by Dark Web Informer

X Thread: <https://x.com/DarkWebInformer/status/1848443935191961936>

Recently I've seen 'fresh' stealer logs with more than the norm of stolen credentials with large companies in them. I want to provide two examples here; EA and Salesforce.  
  
I sent an email to EA on October 18th and have yet to hear back. In the first screenshot you can see I was able to access credentials from someone with EA, but did not go any further to remain ethical. EA which is known to be a terrible company with consumers, shows how terrible of a company they are not to return my email.

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/394982.png)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/ea-email.png)

Moving on.. I was able to do the same exact thig with Salesforce.. but in this case the logs I were reviewing showed a DEV instance that was publicly available to login to. I've left part of it un-redacted. Salesforce was pretty quick in returning their message to me, as well as all responses. THIS... THIS is how a company should be proactive.  
  
If you are a large company, don't be surprised if you here from me this week and the weeks after. BE PROACTIVE and DON'T BE LIKE EA!

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/2384783.png)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/salesforce-email.png)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/salesforce-email2.png)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/salesforce-email3.png)

In both examples, the credentials were both in the same exact logs. The stealer family is well known.  
  
I'll be sharing more of this in the future.  
  
Rating: A for [@salesforce](https://x.com/salesforce)  
Rating: F for [@EA](https://x.com/EA)