Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source', in which the company acquires verified and old accounts on hacker forums in order to track down cybercriminals.
See also: CISA: DNS Fast Flux is being used by cybercriminals
The goal is to use these accounts to infiltrate cybercrime spaces and communities, collecting valuable information that could lead to the exposure of malicious businesses and platforms.
Prodaft is currently interested in purchasing accounts from XSS hacker forums, Exploit.in, RAMP4U, Verified , and Breachforums, offering additional compensation for accounts with administrator or moderator rights.
However, the company will only accept accounts created before December 2022 that have not been involved in cybercrime or unethical activities in the past, in order to ensure their credibility. Additionally, if the account is on the FBI's or other law enforcement's most wanted list, it will not be purchased.
Prodaft states that the transfer process is anonymous and while it will report account purchases to law enforcement, it promises not to disclose sensitive information.
Sellers can contact Prodaft anonymously via TOX or email and share the details for the account review process to get the process started.
See also: WordPress: The vulnerabilities most used by hackers in Q1 2025
Once the account is approved for purchase, the company will make an offer to the seller. Payment methods include Bitcoin, Monero, and any other cryptocurrency the seller prefers.
When asked how much Prodaft is offering for the accounts, the company informed BleepingComputer that the offer depends on many factors.
Prodaft advertised its new program directly on hacker forums, using an old account on the Russian-language XSS cybercrime to promote the purchase of accounts.
Prodaft is known for the aggressive research methods it uses to infiltrate ransomware and cybercrime operations in the past, sometimes leading to the identification and arrest of cybercriminals.
One notable incident is the infiltration of an advanced attack automation platform belonging to the FIN7, which exploited Microsoft Exchange and SQL injection vulnerabilities to compromise corporate networks.
This penetration led to the identification and proactive notification of more than eight thousand compromised organizations, which could have fallen victim to ransomware or other attacks at later stages.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: Hackers FIN7 and FIN8 use Ragnar Loader in attacks
Hacker forums are online discussion spaces where people involved in programming, cybersecurity, and often illegal cyber activities exchange information, techniques, and tools. These forums can range from completely legitimate and educational – such as communities discussing ethical hacking or penetration testing – to completely dark parts of the internet, such as dark web forums related to illegal activities such as data trafficking, malware, exploits, or even financial fraud.
Source: bleepingcomputer
