Two European web forums serving sex workers and their customers have been breached by a Bulgarian threat actor who is now selling 330,000 stolen user records on underground marketplaces.
The hacker, who uses the moniker InstaKilla, exploited a recently disclosed critical vulnerability in vBulletin in order to steal 300,000 records from Dutch forum Hookers.nl and 33,000 records from Italian forum EscortForumIt.xxx. The compromised data includes usernames, email addresses and encrypted passwords. Analysts are warning that the stolen data is likely to be used by cybercriminals to blackmail victims who don’t want to be publicly associated with the forums.
Read more: Escort forums in Italy and the Netherlands hacked, user data put up for sale
