Indexeus is a new search engine that has indexed and displayed account details obtained from more than 100 recent data breaches. This data includes details of several hackers, as the databases used by the search engine are mainly from websites frequented by young wannabe hackers .
The “service” Indexeus boasts that it has an easy-to-use database. The site allows anyone to explore millions of records from some of the biggest data breaches “over 200 million records at our customers' disposal.” The database includes data from the recent leaks of Adobe and Yahoo!, email addresses, usernames, passwords, Internet addresses, physical addresses, birthdays and other information.
Who are the clients of Indexeus? Residents of hackforums [dot] net, a huge forum that has as members beginners and teenage hackers (known also as “script kiddies”) from all over the world, who sell and buy services and tools that have been designed to facilitate online attacks, or to harass other people.
Few services are as ironic and amusing as Ιndexeus. You see, the majority of the 100+ databases detected by the search engine are either from hacker forums that have been breached, or from websites that offer «booter” services – that is, powerful servers that can be rented for denial-of -service attacks.
The brains behind Indexeus are some teenagers or perhaps some who have turned 20. They envisioned the service as a way to scare fellow hackers and make them pay to have their information removed from the “black list” of the search engine. Those who pay «donations» of about $1 per file (paid in Bitcoin) can delete their data from the site’s database, and be assured that their data will not appear again after some future leak.
The team responsible for Indexeus states:
“The purpose of Indexeus is not to provide private information about anyone, but for protection and awareness. Therefore, we are not responsible for any malicious or improper use of our content and services. Indexeus is not a dump. A dump by definition is a file that contains connections, passwords, personal data or email messages. Indexeus provides a unified data mining search engine.”
The information, of course, will be very useful for those who aim to cause harm. As expected, some Hackforums users quickly discovered many of their usernames, passwords, and other data they use on Indexeus. They began to complain about the service on Hackforums, accusing Indexeus.
Who has the INDEXEUS?
The person who hired programmers to help him create Indexeus uses the alias “Dubitus” on Hackforums and other forums. At the bargain price of $25 and two hours of your time on Saturday, Dubitus teaches you online how to do “doxing” and “detracing Web.”
According to KrebsOnSecurity, Dubitus is named Jason Relinquo, a 23-year-old from Lisbon. He claims that his service is an educational tool.
Of course, such a service that exposes the hackers themselves didn't stay online for long. Over the weekend, the website was hacked and defaced by hackers, as reported by ehackingnews.
The group that took responsibility for the attack released a screenshot showing that they uploaded a backdoor shell to compromise the site.
Dubitus indeed states that he gave the root password.
The website at the time of writing this article was offline.
