R00TK1T and Cyber Army of Russia collaborate in BreachForums takedown

Threat actor group R00TK1T and the pro-Russian gang Cyber Army of Russia claimed responsibility for breaching the BreachForums site.

The attackers took to Telegram to boast about their successful takedown of the site’s servers, citing their operation’s precision and efficiency. Additionally, they promised further actions that would impact both the hacker community and regular users worldwide.

In a separate post, R00TK1T indicated plans to publish a comprehensive list of users on the site, complete with their IP addresses and emails.

As a result of the attack, BreachForums is currently offline and inaccessible from any part of the world. Baphomet, the current administrator of the forum, acknowledged the situation on Telegram, confirming the suspension of the domain and reassuring users that investigations were underway.

This latest incident adds to the challenges faced by BreachForums, which has weathered numerous setbacks in recent months. In March 2023, federal agents arrested Conor Brian Fitzpatrick, also known as Pompompurin, a suspected former curator of the forum. Subsequently, the forum experienced a period of downtime before being revived under the stewardship of Baphomet.

However, troubles persisted as vx-underground, a hacker repository, reported a takeover of the site by the notorious hacker gang ShinyHunters on 2 June 2023. This development culminated in the hacking of the new BreachForums site and the subsequent theft and publication of its user database, further exacerbating concerns about user privacy and security.