The notorious BreachForums has once again faced a technical outage, with both its clearnet and onion darkweb domains inaccessible due to a ‘502 – Bad Gateway’ error. This unexpected development has left both security experts and cybercriminals puzzled, as there appears to be no clear indication of the cause behind the site’s current status.
This recent incident comes after a series of disruptions that the forum has experienced in the past, including a domain seizure by the FBI in collaboration with other law enforcement agencies. However, the situation took a twist when the so-called ‘ShinyHunters’ managed to regain control of the seized domains, leading to confusion over the ownership and control of the BreachForums platform.
Speculations have been rife regarding the latest downtime of the site, as there is no seizure notice displayed, adding to the mystery surrounding the situation and the involvement of ShinyHunters. Security researcher Vinny Troia shed some light on the issue, claiming that ShinyHunters had communicated through Telegram about retiring from the forums due to excessive heat and subsequently shutting it down.
The disappearance of the BreachForums Telegram channels, including the main announcement channel and the Jacuzzi 2.0 account, further deepened the confusion. Forum moderator Aegis mentioned in a PGP signed message that ShinyHunters had been banned from Telegram, hinting at potential internal conflicts within the forum’s administration.
In a new ‘Jacuzzi’ Telegram channel established shortly after the official domains went offline, a pinned message reportedly confirmed that ShinyHunters had voluntarily stepped down as the administrator, citing reasons for not wanting to continue managing the forum. Despite rumors suggesting an arrest or seizure, the message clarified that ShinyHunters had quit on his own accord, and the forum had been voluntarily taken down.
Subsequently, reports emerged of a leaked database allegedly containing data from the previous official domain associated with BreachForums. The dissemination of this information sparked concerns over data privacy and security, with some threat actors using the opportunity to garner attention and followers within the cybercriminal community.
Amidst the chaos surrounding BreachForums, alternative platforms like Secretforums and Breach Nation have attempted to capitalize on the situation. However, even these platforms have faced setbacks, with the administrator of Secretforums, Astounded, announcing his retirement from forum activities.
The threat actor USDoD has continued to promote Breach Nation as a viable alternative to BreachForums, applauding the apparent takedown of competitors. These events, coupled with ShinyHunter’s exit and the disruption of official channels, have raised concerns about the future of data leak sharing platforms and the broader implications for cybersecurity.
As more information continues to surface regarding the events surrounding BreachForums, the uncertainty surrounding the fate of the community and its impact on data security remains a pressing issue. This ongoing saga highlights the ever-evolving landscape of cybercrime and the challenges faced by law enforcement agencies in combating illicit online activities. Stay tuned for further updates as the situation unfolds.
