22 March 2023

BreachForums shut down after alleged owner’s arrest


BreachForums shut down after alleged owner’s arrest

The notorious BreachForums hacking forum has closed after its current administrator known as “Baphomet” disclosed that they believe that law enforcement likely has access to the site’s servers.

The decision comes after 22-year-old Conor Brian Fitzpatrick (aka “Pompompurin”) believed to be the leading administrator of BreachForums was arrested in New York last week.

Pompompurin, who has been a well-known player in cybercriminal underground, created BreachForums after the FBI dismantled RaidForums, one of the world’s biggest hacker forums to buy and sell stolen data. In less than 12 months, BreachForums gained popularity with hackers and ransomware gangs and developed into top cybercriminal website, with 225,000 registered members and 740,000 posts.

As Baphomet explained in a post, someone was able to access an old CDN server via Pompompurin's account on March 19, leading them to believe law enforcement may have access to the site's source code and information about the forum's users.

Baphomet said that all forum’s domains will be redirected to a new domain, and the Telegram group and chat will remain up for now.

The admin added that they plan to start a new Telegram group for those interested in creating a successor platform for cybercriminals, and would continue to have an online presence, discussing with competitor forum admins and potentially helping build new service.

Back to the list

Latest Posts

International police operation takes down massive PhaaS platform LabHost

International police operation takes down massive PhaaS platform LabHost

The investigation found over 40 000 phishing domains linked to LabHost, which had some 10 000 users worldwide.
18 April 2024
OpenJS Foundation reports attempted supply-chain attacks on JavaScript projects

OpenJS Foundation reports attempted supply-chain attacks on JavaScript projects

The attackers attempted to introduce suspicious updates or asked to be made maintainers of the targeted software.
17 April 2024
Multiple botnets are hunting for vulnerable TP-Link routers

Multiple botnets are hunting for vulnerable TP-Link routers

Cybersecurity researchers have observed a surge in attacks targeting CVE-2023-1389.
17 April 2024