US investigators may have uncovered the motherload of incriminating data on cybercriminals by seizing the database for hacking site BreachForums prior to its shutdown.
Last week, the FBI arrested the alleged owner of BreachForums, 20-year-old New York resident Conor Brian Fitzpatrick, also known as “Pompompurin.” The news led the notorious hacking forum to close down days later amid fears federal agents had compromised the website.
But it looks like the FBI already obtained a backend database for BreachForums. On Friday, a US judge unsealed an affidavit supporting the criminal complaint against Fitzpatrick. The document(Opens in a new window) mentions federal agents using “records obtained from the SQL database of forum activity on BreachForums” to uncover an IP address that links Fitzpatrick to the Pompompurin profile.
Meanwhile, another section notes that “the FBI’s examination of the BreachForums database reveals that the pompompurin account was typically accessed through VPN services or Tor.” This suggests federal agents seized an internal database that contains the IP addresses for various users of the site.
The disclosure prompted a remaining admin for BreachForums, Baphomet, to warn members that their past activity on the site may be in the hands of the FBI.
“The most important thing right now of our community is to be aware that the FBI is now confirmed to have access to the Breached database. They clearly say so in their most recent documents,” Baphomet wrote(Opens in a new window) in a text document sent via a Telegram channel.
“At this point the entire document will clearly show what I've said for the entirety of my time on Breached, and that you shouldn't trust anyone to handle your own OPSEC
Read more on pcmag.com