The infamous cybercrime forum, BreachForums, has resurfaced online, this time on a clearnet accessible without specialized tools like Tor.
See also: Authorities seize new BreachForums clearnet domain
The platform, which had long been a hub for data leaks, hacking tools and illegal trading, ceased operations earlier this year after a series of takedowns by law enforcement and internal disruptions.
Now, a few months later, it’s back up and running, sparking both excitement from its underground supporters and suspicion from security experts. The forum’s return was announced by its administrator, known only as “koko,” who claimed in a pinned post that basic functionality has been fully restored from a recent backup.
Users can once again browse sections dedicated to stolen credentials, ransomware discussions, and zero-day exploits. Koko stressed that the site is “stronger than ever,” with improved anonymity features to avoid detection.
However, the revival comes amid whispers of a breach, specifically, the old escrow, which handled cryptocurrency transactions for illegal transactions, was hacked, leading to significant losses for both sellers and buyers.
See also: DoJ re-convicts BreachForums founder
BreachForums isn’t starting from scratch. Koko detailed that the team is rebuilding the escrow service from scratch to address the vulnerabilities exposed in the breach. This follows a pattern for the forum, which has bounced back multiple times since its founding in 2022 as a successor to the shuttered RaidForums
Previous editions have been plagued by FBI seizures and arrests, including the takedown of its founder, Conor Fitzpatrick, also known as “Pompompurin” in 2023.
However, the move to the clearnet marks a bold shift. By abandoning the dark web, BreachForums aims to appeal to a wider audience, including less tech-savvy criminals who avoid the complexities of Tor.
See also: Were BreachForums administrators arrested in France?
Experts urge anyone who comes across the site to be cautious. “BreachForums has always been a double-edged sword, valuable information for researchers, but also a magnet for real threats,” said John Doe, a threat analyst at a leading security firm.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
