Recent Breaches a Boon to Extortionists
Summary: Breaches at online hookup site Adult Friend Finder and mobile spyware maker mSpy leaked personal data on millions of customers, and within hours of the mSpy data reaching the Deep Web, users on the Tor-only "Hell" forum were extracting Apple iTunes usernames and passwords from the archive. A forum moderator named Ping described using the credentials to wipe devices and demand ransom, while the Adult Friend Finder database was reported sold online for the Bitcoin equivalent of about USD $17,000 and had been traded since March 2015.
What's compelling: mSpy required users to supply their iTunes username and password to install the app, so many people whose credentials are now circulating do not know the software is on their device and will not think to change their passwords. Krebs located more than a dozen active Facebook accounts apparently tied to married men by spending roughly 10 minutes matching leaked Adult Friend Finder email addresses, turning a membership list into a blackmail target.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026