BreachForums Returns Just Weeks After FBI Seizure – Honeypot or Blunder?

The on the internet prison bazaar BreachForums has been resurrected basically two months after a U.S.-led coordinated law enforcement action dismantled and seized management of its infrastructure.

Cybersecurity scientists and dark web trackers Brett Callow, Dark Web Informer, and FalconFeeds disclosed the site’s on the internet return at breachforums[.]st – 1 of the dismantled sites – by a person named ShinyHunters, who has given that supplied for sale a 1.3 TB databases containing particulars of allegedly 560 million Ticketmaster clients for $500,000.

This contains full names, addresses, email addresses, phone figures, ticket revenue and function details, and the previous 4 digits of credit score playing cards and their associated expiration dates.

Even so, in an intriguing twist, site visitors of the web site are now becoming asked to indication up for an account in order to perspective the written content.

The improvement follows a joint regulation enforcement motion that seized all the new domains belonging to BreachForums (breachforums[.]st/.cx/.is/.vc), when also hinting that the site directors Baphomet and ShinyHunters may well have been arrested.

The procedure also resulted in the seizure of the Telegram channel operated by Baphomet, with the U.S. Federal Bureau of Investigation (FBI) noting that it is really reviewing the site’s backend details.

It is not at present distinct if the particular person(s) applying the ShinyHunters persona on BreachForums is the first ShinyHunters hacker. Also unfamiliar is the method how they arrived to be in possession of just one of the clearnet internet sites seized by the FBI, although Hackread.com described that they reclaimed the domain from domain registrar NiceNIC.

Nonetheless, the possibility that it might be a honeypot has not been shed between customers of the cybersecurity local community.

BreachForums emerged in March 2022 in the aftermath of the shutdown of RaidForums and the arrest of its operator “All-powerful.” It was dismantled in mid-June 2023, just after which it was revived by Baphomet and ShinyHunters to start a new website beneath the same name.

Both of those the U.S. Division of Justice (DoJ) and the FBI have still to remark on the takedown, or the re-emergence of the discussion board for that make a difference.

Discovered this posting intriguing? Stick to us on Twitter  and LinkedIn to examine additional distinctive material we write-up.

Some elements of this write-up are sourced from:
thehackernews.com