The panel for Collector Stealer malware version 2.0.0 stores the login credentials in plaintext in its MySQL database. Third-party attackers who gain access to the system can read the database username passwords without having to crack them offline.
15ab8b91cfbc6055ea9d50390faa4c8e2e74bc44b945b727a94048903bc96a58