361 million new email addresses have been added to Have I Been Pwned, a data breach notification service that allows all users to check if their account data has been compromised, including those stolen from password-stealing malware, credential-stuffing attacks and data breaches.
Cybersecurity researchers collected the credentials from a large number of Telegram cybercrime channels, which often build reputations by leaking stolen data to attract more subscribers.
Stolen data is usually leaked in two forms, the first is in the form of a set of usernames and passwords (usually stolen through credential stuffing attacks or data breaches), the second is in the form of a set of usernames, passwords, URLs associated with them (stolen through password skimming software), and raw cookies (stolen through password skimming software).