BreachForums Hack Exposes Cyber Criminal’s DMs

hello world a database containing millions of private messages belonging to cyber criminals has been stolen and is now up for sale this is one hell of a juicy data leak and will no doubt expose the secretive operations of thousands of hackers the database was stolen from breach forums a sence with cyber miscreant share knowledge sell black hat tools and posst Haack databases but today it's the database of breach forums itself that's up for grabs but not the version of the site that currently exists but rather the previous version that was run by the infamous hacker pom pom perin before he was arrested at the hands of the FBI earlier this year the database on sale contains over 1.6 million private messages sent between the forum's 200,000 members but before we get to the juicy details how do we know the database is even genuine well there's a bit of a story behind that a few days ago the internet's favorite breach notification site have iben pone.com added to breach forum's database to their collection in a tweet or X whatever you want to call it they said the dat L dump includes email and IP addresses usernames private messages and password hashes and they linked to the Twitter account which submitted the database to them a Brand's new account with zero tweets but then literally 30 minutes after have I been paone's tweets the newly created account announced that the database was for sale and posted their contact information so it looks like have I been pawned unknowingly acted as a kind of verification service for the seller I mean these guys are well trusted if they say a database is genuine then that's the best kind of vouch you can get the database itself contains quite a bit but the real value of course lies in the database of private messages this contains every private message sent between breach forums users and as you might imagine on a forum dedicated to cyber crime a lot of those private messages will be rather incriminating let's not forget a leaked database containing private messages is exactly how the owner of breach forums pom pomin was taken down years before his arrest on breach forums predecessor raid forums pom pom perin sent a message to a fellow user which referenced an email address containing his real name Conor Fitzpatrick despite the facts that at the time the recipient of the message didn't realize it years later when the feds managed to grab raid forums database they did realize pom pom puran's mistake which helped them identify him IRL and well the rest is history but as for the latest leak in addition to private messages it also includes the forum's database of payments as in the details of users who bought a rank on the Forum using cryptocurrency the payment addresses are all here which could lead to the unmasking of quite a few users as there's tons of cases of cyber bad guys with awful obsc buying or Cashing Out crypto using a coinbase account registered in their real name I managed to get an interview with the seller of the data dump whilst he didn't want me to show direct screenshots of our conversation he did say he received offers in excess of $50,000 for the data dump but the reason he gives for not having having yet sold it is because he's worried about potential buyers eventually leaking it publicly which he really doesn't want to happen he explains that he's been a part of the community for ages and doesn't want to totally destroy it which I suppose is somewhat of a possibility if the leak did become public I mean if you think about it it's not just the incriminating messages in the database that would cause some drama but the messages could expose betrayals between Forum members secret grudges within the community and uses conspiring to scam each other and so on the Fallout from all that being made public could cause some fireworks as for the obvious question how the database ended up in his hands well that's not something he wanted to discuss he did say that pom pom perin's private messages actually reveal his involvement in certain illegal activities knowledge of which isn't currently public but I haven't seen those raw private messages because well I didn't buy the database so I reckon it would be a bad idea for me to reiterate allegations that I just haven't seen evidence for speaking of P pom p and since he was arrested and unmasked by the FBI earlier this year for his role in operating breach forums we haven't had much of an update on the guy that all changed a couple weeks back when pom pom pin AKA Connor Brian Fitzpatrick pled guilty to an array of offenses most of which are what you'd expect like operating breach forums trafficking in unauthorized access devices a term which basically refers to stolen credentials he also admitted to running a middleman service for cyber criminals wanting to buy L cell stolen databases none of these admissions really surprised anyone however there is a darker side to pom pom pin that was only uncovered after his arrest in addition to the cyber crime related charges there is a section in the court documents relating to his possession of well CP I won't go into the grizzly details but in short the guy's computer was full of the stuff and by the way this document isn't a list of accusations it's basically a confession signed by Connor Bryan fits Patrick himself this has unsurprisingly decimated Connor's reputation which up until now was rather positive in the Cyber criminal Community I mean in the early hours of his arrest he was preemptively banned on breach forums with the reason Legend but now the adman of breach forums 2.0 baffet published a post essentially denouncing Connor someone he's been friends with for years saying he wants nothing to do with him anymore one for member said I like P but not Fitzpatrick which I think perfectly sums up the general feeling in the community pom pom purin was their guy railing Against the Machine he hacked the FBI ran a massive cyber crime forum and probably made a decent bit of money in the process but now his legacy is forever tainted with Forum admins even going so far as to remove pom pom pin related emotes from the site any chance of Connor bouncing back after serving his prison time and becoming some kind of a reformed black hat that gets to go on TV and speak at conferences seems to be out the window the guy will be sentenced in November and faces a maximum of 40 years in prison as for the database it's yet to be sold and if you're wondering whether the FBI might want to get their hands on it well there's no need for that because after breach forums 1.0 was shut down in March the FBI obtains a copy of the database for themselves and their version is a lot juicier because it's a snapshot of the site as it existed when the sites were shut down as opposed to the leak for sale which is a snapshot from last November if you want to see more of the breach forums drama I've created a playlist with all my breach forums related videos which I'll link in the description as always if you enjoyed this video let me know by hitting the Bell icon and I'll see you in the next video have a good one

Channel: Seytonic

Views: 93,072

Keywords: technology, tech, computer, computer science, computers, technology news, tech news, weak web, cybersecurity, cyber security, infosec, info sec, information security, cybersec, hack, hacked, hacking, hackers, breachforums, breach, forums, pompompurin

Id: C8HBYLhH4hk

Length: 6min 41sec (401 seconds)

Published: Sun Aug 06 2023