The FBI decided to shut down the domain WeLeakInfo.com after discovering that the site was selling data obtained from hacking attacks and breaches.
This was done after a coordinated effort by the FBI, the UK NCA, the Dutch Police, the German Bundeskriminalamt and the Police of Northern Ireland. The FBI shut down WeLeakInfo.com and published a statement to that effect. This statement is seen by anyone attempting to access the site.
The US announced that authorities made this decision after it was found that thedomain offered subscriptions that allowed subscribers to search for specific information that had been exposed online following data breaches.
“The website claimed to provide its users with a search engine to search and obtain personal data illegallyduring 10,000 data breaches. They contained over 12 billion registered records, including names, emails, usernames, phone numbers and passwords for online accounts. The website sold subscriptions so that anyone could access the results of these data breaches. Subscriptions offered unlimited searches and access during the subscription period (one day, one week, one month or three months).”
Authorities now have the domain name under their control, but they are seeking more information about its administrators and are asking people to provide any information to the FBI's Internet Crime Complaint Center (IC3)
The commercialization of stolen data
WeLeakInfo.com had claimed to have nearly 12.5 billion stolen data sets at its disposal. Users of the site could gain access to the stolen data by paying a subscription fee.
Depending on the length of time someone wanted access, the cost of the subscription was calculated. Subscriptions started at $2 and could reach $70 (for three months of unlimited access to the archives).
We Leak Info vs HaveIBeenPwned
At this point we see how differently one can manage access to sensitive information that has been illegally obtained. WeLeakInfo.com gives anyone access to get money, while another site, HaveIBeenPwned, notifies userswhose data has been compromised so they can protect themselves.
In the case of We Leak Info, malicious hackers were able to search for exposed usernames and passwords and then used them to perform credential stuffing and phishing attacks as well as other breaches.
On the other hand, HaveIBeenPwned only tells you if a breach has occurred. It doesn't provide any other information.
When it was announced that the site was shutting down, many people were unsure if it was a hoax or a real announcement.
A Twitter showed that 70% of 492 respondents thought it was funny.
The strangest thing is that WeLeakInfo.com itself showed that it did not know what was happening and wrote on Twitter: "the matter is currently being investigated.".
