US authorities crack BreachForums for a second time

[Pelican Press 0]

US authorities ****** BreachForums for a second time

An international law enforcement operation led by the ******* States’ Federal Bureau of Investigation (FBI), with assistance from the ***’s National ****** Agency (NCA) and others, has taken down the English-language BreachForums data ***** forum, operated by a hacking collective known as ShinyHunters, for the second time in the space of a year.

BreachForums, which operated in plain sight on the internet, and was itself a successor to the RaidForums service disrupted in 2022 – had been previously disrupted by the authorities

This is the hidden content, please

• Sign In
• or
• Sign Up

after it offered data

This is the hidden content, please

• Sign In
• or
• Sign Up

, a public health insurance market serving the city of Washington DC and by extension, many ********* politicians.

This operation saw the arrest of a New York state resident identified as BreachForums admin Pompompurin. This individual, whose real name is Conor Fitzpatrick, later pled guilty to *********** to commit access device ******, solicitation for said purposes, and possession of child ************. In January of 2024, he was sentenced

This is the hidden content, please

• Sign In
• or
• Sign Up

for breaching bail conditions.

In the meantime, another high-profile forum member using the handle Baphomet, who had worked under Fitzpatrick,

This is the hidden content, please

• Sign In
• or
• Sign Up

in the summer of 2023 and used it to ***** more data. It is this version of the ********* project, alongside Baphomet’s Telegram channel, that has now been disrupted.

The FBI made no formal announcement of the seizure, and according to US reporting has declined to comment further. However Computer Weekly has confirmed that the site has been replaced with an official takedown notice stating the site has been taken down by the FBI and Department of Justice (DoJ).

This site now redirects to

This is the hidden content, please

• Sign In
• or
• Sign Up

where the FBI states: “The Federal Bureau of Investigation (FBI) is investigating the ********* hacking forums known as BreachForums and Raidforums.

“From June 2023 until May 2024, BreachForums (hosted at breachforums.st/.cx/.is/.vc and run by ShinyHunters) was operating as a clear-net marketplace for cyber ********** to buy, sell, and trade contraband, including stolen access devices, means of identification, hacking tools, breached databases, and other ******** services.”

The FBI has additionally stated it is reviewing the site’s backend data, which suggests it may have hacked into BreachForums some time ago. There has already been some discussion that the authorities may have been motivated to move up their timeline quickly after BreachForums offered for ***** data supposedly

This is the hidden content, please

• Sign In
• or
• Sign Up

.

Commenting on news of the takedown, Michael McPherson, senior vice president of security operations at

This is the hidden content, please

• Sign In
• or
• Sign Up

, and a former FBI special agent, said: “The inevitable question that will be asked in the aftermath of the BreachForum takedown, is what comes next? With the likely seizure of servers and domains associated with the forum, law enforcement will have significant intelligence opportunities.

“While details are sparse at this time, users of the site will likely have significant concerns over their own operational safety, with the FBI likely in possession of material that could be used to provide attribution of members. Organisations named on BreachForums also may be provided with additional context over material breached on the forum.”

McPherson said while it was possible that members of the ShinyHunters collective would again attempt to restore the service, suspicions among at-large members over the scope of law enforcement operations against them would be running high, leading to likely recriminations and fallings out.

Additionally, he pointed out, if they do establish another version of BreachForums, they will also face more scrutiny from potential members and service users over the risk that the site may be little more than a police honeypot.

Although exactly what comes next is unclear at the time of writing, McPherson added: “The operation should be seen as a success, continuing the tempo of law enforcement operations that have surged in recent months.”

This is the hidden content, please

• Sign In
• or
• Sign Up

#authorities #****** #BreachForums #time

This is the hidden content, please

• Sign In
• or
• Sign Up