Posted on boards like BreachForums or specialized Portuguese-speaking forums for use in account takeover (ATO) attacks.
Likely a "Combo List" (email:password or user:password) or a lead list containing full names, CPFs (Brazilian tax IDs), and phone numbers. Common Data Structure 82K DE INOCES.txt
If CPFs and full names are included, the data is used for fraudulent loan applications or "SIM swapping." The file appears to be a data leak
Attackers use these lists to "stuff" credentials into other websites, hoping for password reuse. 000 records of compromised personal information
The file appears to be a data leak or a "combo list" containing approximately 82,000 records of compromised personal information, likely targeting Portuguese-speaking users (primarily from
Based on similar leaks in the Brazilian underground market, the internal structure typically follows one of these formats: email@provider.com:password Full Name|CPF|Phone Number|Date of Birth Username|Password|IP Address Source & Distribution These files are typically distributed via: