Threat Actor: PomPomPurin | PomPomPurin
Victim: BreachForums | BreachForums
Price: N/A
Exfiltrated Data Type: Stolen data
Key Points :
- PomPomPurin is the founder of BreachForums, launched as a successor to RaidForums.
- Arrested by the FBI in March 2023 and sentenced to 20 years of supervised release.
- Must serve two years under house arrest and is banned from internet use for the first year.
Threat Actor: Baphomet | Baphomet
Victim: BreachForums | BreachForums
Price: N/A
Exfiltrated Data Type: Stolen data
Key Points :
- Baphomet took over as administrator after PomPomPurin’s arrest.
- Shut down the first version of BreachForums due to suspected FBI infiltration.
- Disappeared without a trace after the second version was seized by the FBI in May 2024.
Threat Actor: ShinyHunters | ShinyHunters
Victim: BreachForums | BreachForums
Price: N/A
Exfiltrated Data Type: Stolen data
Key Points :
- Revived BreachForums after the second version was closed by the FBI.
- Regained access to the domain but the third iteration lasted less than a month.
- Announced retirement amidst rumors of the forum being an FBI honeypot.
Threat Actor: Anastasia | Anastasia
Victim: BreachForums | BreachForums
Price: N/A
Exfiltrated Data Type: Stolen data
Key Points :
- Anastasia is the fourth administrator of BreachForums with little known about their identity.
- Took over after ShinyHunters but vanished without leaving any clues.
- Linked to former administrators, but details remain scarce.
Threat Actor: IntelBroker | IntelBroker
Victim: BreachForums | BreachForums
Price: N/A
Exfiltrated Data Type: Stolen data
Key Points :
- IntelBroker is the current operator of BreachForums.
- Operates discreetly on both dark web and open web platforms.
- Details about IntelBroker remain scarce as law enforcement continues to crack down on cybercrime forums.
The administrators behind the infamous dark web data breach forum, BreachForums, have been exposed.
Established in March 2022, BreachForums quickly became a hub for cybercriminals trading in stolen data. The forum has seen a series of administrators, each with their own fate, as detailed below.
BreachForums has been a target of extensive law enforcement efforts. The FBI, along with international agencies, has seized the site multiple times, most recently in May 2024.
It served as a marketplace for illicit activities, impacting millions globally by facilitating data breaches and cyber-attacks.
PomPomPurin: The Founder
The saga began with PomPomPurin, the founder of BreachForums. After the FBI shut down RaidForums in 2022, PomPomPurin launched BreachForums as its successor.
However, in March 2023, PomPomPurin was arrested by the FBI. Identified as Conor Brian Fitzpatrick from New York, he was sentenced in January 2024 to 20 years of supervised release.
Although he avoided prison time, Fitzpatrick must serve two years under house arrest and is banned from using the internet for the first year.
Baphomet: The Mysterious Disappearance
Following PomPomPurin’s arrest, Baphomet took over as administrator. Suspecting that the FBI had infiltrated the forum’s infrastructure, Baphomet shut down the first version of BreachForums.
By June 2023, Baphomet partnered with ShinyHunters to launch a second version of the forum. However, this too was short-lived; by May 2024, it was seized by the FBI.
Baphomet has since disappeared without a trace, leading to speculation about his possible arrest or even his role as a federal undercover agent.
ShinyHunters: A Brief Tenure
After the second version was closed by the FBI, ShinyHunters briefly revived BreachForums.
Despite successfully regaining access to its domain in a battle with the FBI, this third iteration lasted less than a month before becoming inaccessible again in June 2024.
Amidst rumors that the forum had turned into an FBI honeypot, ShinyHunters announced retirement due to mounting pressure and handed over control to another administrator known as Anastasia.
Anastasia: Vanished Without A Trace
The fourth administrator, Anastasia, remains an enigma. Little is known about this figure except for claims that Anastasia is linked to former administrators.
Following ShinyHunters’ departure, Anastasia took over but soon disappeared without leaving any clues about their whereabouts or intentions.
IntelBroker: The Current Operator
The latest known operator is IntelBroker. Details about IntelBroker remain scarce as they manage operations discreetly on both dark web and open web platforms.
As law enforcement continues to crack down on cybercrime forums like BreachForums, these revelations highlight the ongoing cat-and-mouse game between authorities and cyber criminals.
Each administrator’s experience highlights the unpredictable and dangerous nature of operating within such illegal networks, according to reports.
While the future of BreachForums remains uncertain, its history serves as a stark reminder of the challenges faced by law enforcement in combating cybercrime on the dark web.
As investigations continue and more details emerge, only time will tell what lies ahead for those involved in this shadowy digital underworld.
Source: Original Post