Group-IB has a good explainer on the differences between infostealer logs, combolists, and URL-Login-Password (ULP) files that are often advertised as "new leaks" on hacking forums and the dark web and why most of the time they are likely to be very old data