← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Doomsday for Cybercriminals Data Breach of Major Dark Web Forum
WHITE PetrP.73 2026-01-12 Modified: 2026-02-11
24
IOCs
MEDIUM VOLUME
The data breach involving BreachForums, a prominent dark web forum, marks a significant event for cybercriminals and the broader security landscape. Historically, BreachForums acted as a successor to RaidForums, which was shut down in 2022 due to law enforcement actions. Following its own shutdown in March 2023, BreachForums attempted to continue operations under new management, but was subsequently seized again in May 2024. This forum served as a hotspot for discussions related to hacking, distribution of stolen data, and various illicit activities.
breachforumseu datashinyhuntersjamesdark webraidforumsresecurityjanuaryfebruarykuroishindrajunedatecodeaprilprojectdonaldctoseternityfortunelifepegasuskinggomahermesjerusalemachillesevilsaturnhadeslookdustlightexploitmenalokiaugustturkishtrinitychaos
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (5 / 24 total)
All CVE URL domain email hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://breached.vc/.to/.co — 2026-01-12
URL http://breachforums.st/.cx/.is/.vc — 2026-01-12
URL https://doingfedtime.com/888/ — 2026-01-12
URL https://securityconversations.com/episode/allison-nixon-on-disturbing-elements-in-cybercriminal-ecos... — 2026-01-12
URL https://www.rnids.rs/en/domain-name-status-codes#Active — 2026-01-12
References (1)
↗ https://www.resecurity.com/blog/article/doomsday-for-cybercriminals-data-breach-of-major-dark-web-foru