Cyber Risks · Krebs on Security

2nd Breach at Verticalscope Impacts Millions

Summary: Hackers compromised Verticalscope.com, the Canadian operator of hundreds of forums with more than 45 million user accounts, for the second time in two years, with researcher Alex Holden finding at least two backdoors known as "Web shells" on the site and a similar shell on Toyotanation.com. Verticalscope said it detected an intrusion on six of its websites, including Toyotanation.com, Jeepforum.com and watchuseek.com, and had removed the file manager, expired all passwords on those six sites, and added the malicious file pattern to its detection tools.

Why it matters: The breach surfaced alongside LuiDB, a paid service selling searches of breached account data for $5 to $400 in Bitcoin, and the reused passwords from forums like these are what feed such lookups and expose accounts on more sensitive sites.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related