The websites AdultFriendFinder and Cams.com have reportedly been hacked, with hundreds of millions of their user accounts leaked online.
According to LeakedSource, Friend Finder’s network was hacked with a remote file inclusion (RFI) exploit. This allowed the attackers to gain access to the databases of all the sites owned by the company, namely: AdultFriendFinder, Cams.com, Penthouse, Stripshow, iCams.com and another “unknown domain.”
The RFI exploit was discovered a few weeks ago by AdultFriendFinder administrators, and is believed to be the same one responsible for the leak of the site’s customer information.
In total, over 400 million user accounts were leaked, 339 million from AdultFriendFinder, 62 million from Cams.com. All the remaining accounts came from other sites in the Friend Finder network.
It should be noted that Friend Finder did not properly encrypt the passwords. Many were stored in plain text, without any protection, while others were hashed using the weak SHA1 algorithm, which is very easy to crack.
So if you had an account on AdultFriendFinder, or any other website on the network, don't use the same password on other services. Of course, you should change your password immediately, wherever you use it.
To make matters worse, LeakedSource claims that Friend Finder Network retained the data of users who had deleted their accounts.
If this is true, the Ashley Madison seems like a minor blunder compared to the new hack. The leak of user data could have devastating consequences for the site's users.
Let's recall that after the Ashley Madison hack, many of the site's users were blackmailed by the hackers, or by those who obtained the data.
