- Authorities seize domains used by dispersed Lapsus$ hunters
- Salesloft/Salesforce breach files leaked
- The group stated that “the era of forums is over”
The domains used by Scattered Lapsus$ Hunters to host data leak websites were reportedly seized by authorities just as the group was about to leak files stolen in the Salesloft/Salesforce breach. However, that didn’t stop the leaks.
The clearnet domain breakforums.hn was defaced, displaying the usual FBI placeholder: “this domain has been seized.” This domain was previously used to reestablish BreachForums, an infamous underground website where cybercriminals exchanged knowledge, tools, and stolen goods, but after the FBI took down the forum for a second time, Scattered Lapsus$ Hunters took it back for use as an extortion and data breach site.
Just days before the latest takedown, Scattered Lapsus$ Hunters announced that they would begin leaking the data stolen in the Salesloft/Salesforce breach, and even shared the exact moment the files would be online. In an obvious attempt to thwart the leaks, the FBI, along with French authorities, took down not only the breakforums.hn site, but also the Tor site. However, this was restored quite quickly and files belonging to several companies were leaked.
The forums are dead
Among the victims were Qantas, Gap, Vietnam Airlines, Toyota, Disney, McDonald’s, Ikea and Adidas. Files belonging to more than 40 companies were leaked.
Unfortunately, no arrests were made, meaning that the scattered Loop$ hunters can simply prop up the forum and pick up where they left off. However, according to beepcomputerThe group has no intention of resurrecting the famous forum and would claim: “The era of forums is over.”
It looks like Telegram groups will take over, serving as makeshift forums with a little more resilience.
Another reason to stay away from the forums, according to CyberInsideris the fact that the FBI “destroyed” database backups dating back to 2023, along with all databases in custody.
The hackers also apparently said that all hacking forums that emerge after BreachForums should be considered honey traps backed by cybersecurity researchers and law enforcement authorities and, as such, should be avoided.
Through beepcomputer
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds. Be sure to click the Follow button!
And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp also.
