Breach Disclosure: Void.to

Breach Disclosure: Void.To

In June 2019, cracking website and community Void[.]to was compromised. The website has a number of forums dedicated to sharing leaked data, video game cheats, general hacking and coding discussion and a marketplace to sell access to machines, cheats and malware. Rival forum Raidforums uploaded the database to their "Official" database forum on June 13, 2019. The leak contains approximately 86,000 rows of usernames, email addresses, passwords, source code and website data.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• Remain alert to potential spear phishing attacks through email and social media

Details

Raidforums administrator Omnipotent posted the breach, with the following text:

"Hello RaidForums Community,
Today I have uploaded the VoidTO Forum Database for you to download for free, thanks for reading and enjoy!

|Notes|
On the 13th of June 2019 the forum void[.]to was breached and server shredded, 86,312 users were affected. I have uploaded the full database and root directory of this website for you to download and see for yourself. I hope you enjoy these leaks as I enjoy posting these websites with incapable or ignorant admins/owners who could care less for their users' security. To all reading, have a good day and enjoy the data.

Compromised data: Website activity, Usernames, Emails, IP Addresses, Passwords (Salted MD5 or Sha512_Bcrypt), Source code, Website data, User private messages"

This breach, like the Cracked[.]to and OGUsers breach, shows that crack and leak forums like Void[.]to need to worry about rival forums and not just network defenders and law enforcement.