BreachForums, an online bazaar for stolen data, seized by FBI

BUSTED —

An earlier iteration of the site was taken down last year; now its reincarnation is gone.

The front page of BreachForums.

Enlarge / The front page of BreachForums.

The FBI and law enforcement partners worldwide have seized BreachForums, a website that openly trafficked malware and data stolen in hacks.

The site has operated for years as an online trading post where criminals could buy and sell all kinds of compromised data, including passwords, customer records, and other often-times sensitive data. Last week, a site user advertised the sale of Dell customer data that was obtained from a support portal, forcing the computer maker to issue a vague warning to those affected. Also last week, Europol confirmed to Bleeping Computer that some of its data had been exposed in a breach of one of its portals. The data was put up for sale on BreachForums, Bleeping Computer reported.

On Wednesday, the normal BreachForums front page was replaced with one that proclaimed: “This website has been taken down by the FBI and DOJ with assistance from international partners.” It went on to say agents are analyzing the backend data and invited those with information about the site to contact them. A graphic shown prominently at the top showed the forum profile images of the site’s two administrators, Baphomet and ShinyHunters, positioned behind prison bars.

The FBI also created a dedicated subdomain on its IC3.gov domain that said: “From June 2023 until May 2024, BreachForums (hosted at breachforums.st/.cx/.is/.vc and run by ShinyHunters) was operating as a clear-net marketplace for cybercriminals to buy, sell, and trade contraband, including stolen access devices, means of identification, hacking tools, breached databases, and other illegal services.” The page provided a form that visitors could fill out to provide tips. At the time this post went live, breachforums.ic3.gov was not available.

The FBI and the Department of Justice declined to comment.

The action on Wednesday is the second time within a year that the online data bazaar has been taken down by law enforcement. Last June, a different domain used to host the site was seized three months after the FBI arrested its alleged founder and operator. Conor Brian Fitzpatrick, then 21 years old, pleaded guilty to multiple charges. In January, he was sentenced to 20 years of supervised release. Prosecutors said that under Fitzpatrick, BreachForums had provided access to the personal information of millions of US citizens.

Shortly after the June takedown of the site, a new individual stepped forward and revived the forum by hosting it on a new domain, which the FBI said had changed three times. This time around, the FBI also seized the official BreachForums Telegram channel and a second one belonging to Baphomet. Both channels displayed the same graphic appearing on the newly seized BreachForums site. It’s not clear how authorities took control of the Telegram channels.

The claim that authorities have access to the BreachForums’ backend data raises the possibility that they are now in possession of email addresses, IP addresses, and other data that could be used to prosecute site users.

In 2022, the FBI seized RaidForums, another site for buying and selling malware and compromised data.

Listing image by Shutterstock

Note: This article have been indexed to our site. We do not claim legitimacy, ownership or copyright of any of the content above. To see the article at original source Click Here

Related Posts
Rust extension traits, greppability and IDEs thumbnail

Rust extension traits, greppability and IDEs

Traits are a central feature of Rust, critical for its implementation of polymorphism; traits are used for both static (by serving as bounds for generic parameters) and dynamic (by having trait objects to serve as interfaces) polymorphism. This post assumes some familiarity with traits and discusses only a specific aspect of them - how extension…
Read More
Gamifying Physical Therapy With the PalmPlug One thumbnail

Gamifying Physical Therapy With the PalmPlug One

Gamifying Physical Therapy With the PalmPlug OneShare SubtitlesOffEnglishGizmodo got a quick hands on with the wearable advanced motion capture technology at CES. PalmPlug One is available for preorder now.PublishedJanuary 9, 2024Comments (2)We may earn a commission from links on this page.Video Program GuideMost PopularLatest VideosTech NewsScienceio9EartherMost PopularSlide 1 of 16Now playing03:02Teenage Engineering’s TP-7 Is the
Read More
This is the perfect weekend to play these free games! thumbnail

This is the perfect weekend to play these free games!

Chegou o fim-de-semana e parece que podemos finalmente descansar da longa semana que tivemos. Afinal de contas, é muito stress em cima devido aos casos de COVID-19, ao excesso de trabalho e até mesmo para alguns, o aproximar do inicio das aulas. No entanto, como se costuma dizer, o importante é mesmo viver o momento.…
Read More
Update voor Google Pixel 6 (Pro) sloopt in sommige gevallen de wifi thumbnail

Update voor Google Pixel 6 (Pro) sloopt in sommige gevallen de wifi

Google brengt iedere maand een beveiligingsupdate uit voor haar Pixel-smartphones. De meest recente update zorgt bij de Pixel 6 voor problemen. Lees verder na de advertentie. Steun Android Planet Je gebruikt een adblocker. Dat vinden we jammer, want advertenties hebben we nodig om onze artikelen gratis aan te bieden. Steun Android Planet door ons aan…
Read More
Index Of News