The term "combolist" is a portmanteau of "combination list." In the context of cybercrime, it is a structured text file containing stolen login credentials, usually formatted as email@example.com:password . Unlike raw, messy data dumps from a single breach, a combolist is a curated, cleaned, and compiled file designed for one purpose: to be fed into automated hacking tools.
Malware infected on personal computers scrapes passwords saved in web browsers and sends them back to command-and-control servers. The Dangers of "Mail Access" Leaks 220k mail access valid hq combolist mixzip hot
Possessing or distributing “combolist mixzip” files is illegal in most jurisdictions: The term "combolist" is a portmanteau of "combination list