Leaked API key
A cloud, payment or messaging credential lifted out of a config file, a repository or a stealer log and traded on its own. No password reset touches it, and most carry no expiry.
Why it matters to you
Key material rarely shows up in login telemetry, because it does not log in. Inventory what each key can reach and rotate on a schedule rather than on suspicion.
Where we meet it
A log carries far more than browser passwords, and the config and token files inside it are the part a victim never thinks to check. That is where a key that appeared in no breach notice turns up.
Connected terms
Stealer log
The complete output of an infostealer infection: every saved browser password, session cookie, autofill record and crypto-wallet file from one victim machine, zipped into a single bundle.
Session cookie
The token that proves a browser is already logged in, copied straight out of a victim's browser by an infostealer. Replayed elsewhere it opens the account without the password and without a second factor.
Wallet file
The wallet database and key material an infostealer copies off a victim machine, sold on the chance that the passphrase is weak, reused, or sitting in the same log.
Read elsewhere
Where this term stops being vocabulary
Sherlog is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the goods
Bank log
Access to a compromised online banking account, sold with the balance quoted in the listing. Priced as a fraction of what it holds, because the buyer still has to get the money out.
BIN
The first six to eight digits of a payment card, identifying the issuing bank, the country and the card product. Not stolen data in itself, but the index the trade is organised around: cards are advertised, sorted and priced by BIN.
Card dump
The magnetic-stripe data read off a payment card, sold for cloning into a physical one. Distinct from card-not-present data, priced higher, and slowly becoming a legacy good as chip and contactless spread.
Combolist
A recycled email:password list compiled from old breaches and other people's logs, resold in bulk. The fast food of the credential economy: cheap, stale, everywhere.