[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdcd7WBQUpQ62QXbHt3rQK0oYq6UuJGOpq2DObwdzdMc":3},{"article":4,"iocs":36,"watch_terms":40},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":10,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"491712d1-4ca8-4523-8a3a-015b479e1748","‼️A threat actor is sharing a fresh ULP (URL:Login:Pass) stealer log collection dated March 17, 2...","a-threat-actor-is-sharing-a-fresh-ulp-url-login-pass-stealer-log-collection-date","‼️A threat actor is sharing a fresh ULP (URL:Login:Pass) stealer log collection dated March 17, 2026, totaling 12.7 GB compressed. https:\u002F\u002Ft.co\u002FylcXP2C38J","A threat actor is publicly sharing a large credential theft collection (12.7 GB compressed) containing URL, login, and password data stolen via malware, dated March 17, 2026. This represents a significant credential compromise affecting an unknown number of victims and likely indicates active distribution or sale of stolen authentication data on underground forums.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2034002060425720036","2026-03-17T20:20:55+00:00","2026-03-17T21:00:09.337553+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37],{"type":19,"value":38,"context":39},"ULP stealer","Credential-stealing malware collecting URL:Login:Pass tuples; active distribution March 2026",[]]