A database from the popular adult website MyFreeCamshas been leaked on a hacking forum, putting data at risk.
A SQL injectionagainst the company in December led to a leak on the site's servers. According to CyberNews, the database contained records of 2 million MyFreeCams Premium members, including usernames, email addresses, amounts of MyFreeCams (MFC Tokens) and plain text passwords.
The stolen data is now being sold on hacking forums in packages containing data from 10,000 users for $1,500 in bitcoin. However, other cybercriminals could easily make at least $10,000 on the black market from a single bundle of stolen data by selling premium accounts with MFC Token balances.
After discovering the leak and sale of user data, CyberNews contacted MyFreeCams and the company immediately notified affected users and reset their passwords.
As discovered, the stolen files of users of the adult streaming site appear to be in high demand by cybercriminals, as the bitcoin wallet of the hacker who made them available on the forum shows a balance of around $21,600.
This data could be used to blackmail website users, commit attacks , launch targeted phishing attacks, and send emails to victims.
Fortunately, the database does not contain sensitive information or financial data, such as credit card numbers or passport IDs. However, the stolen email addresses and plain text passwords could be enough to compromise other victim accounts if they use the same credentials across multiple online services.
Senior information security researcher Mantas Sasnauskasprovided further information about the implications of the MyFreeCams data breach in a statement:
“When leaks like this happen, the risks lie not only in compromised accounts and passwords or stolen virtual currencies. Breaches of this kind raise serious privacy issues: most users of sites like MyFreeCams would undoubtedly prefer to remain anonymous, but now their email addresses can be used for a variety of purposes. It’s not hard to imagine the implications if this information were used maliciously. For example, to blackmail people for payment, leak user details from the site, or even reveal to their families, employers, or the general public that they frequent the site.”
MyFreeCams users should reset their passwords immediately and consider using a password manager to create unique, strong, and complex passwords to further protect their online accounts.
