Popular OGUsers hacking forum breached for the second time in a year

OGUsers, one of the most popular hacking forums, was hacked again, it is the second security breach it has suffered in a year.

The popular hacking forum OGUsers was hacked again, it is the second security breach it has suffered in a year, the news was first reported by ZDNet.

OGUsers is a black marketplace known for selling any kind of stolen data, including Instagram, Fortinet, Minecraft, Steam, PSN, Fortinet, Skype, and Snapchat accounts. The site was also used by crooks to manage the organizations of SIM swapping attacks.

OGUsers’ administrator ACE who disclosed the security breach admitted that an unknown hacker uploaded a shell to the avatar uploading feature and stole personal data of over 200,000 registered users.

“It appears that someone was able to breach the server through a shell in avatar uploading in the forum software and get access to our current database dating April 2, 2020,” said Ace.

The data breach notice discovered by the data breach monitoring service Under the Breach.

The administrator first forced a password reset for the users, then he asked them to enable two-factor authentication (2FA) for their accounts before putting the forum offline into maintenance mode.

The forum users should know everything about account hijacking since this is how OGUsers became widely known in the first place.

In May 2019, the administrator of the forum disclosed a first data breach:

“More unfortunate news,” the administrator, who goes by Ace, wrote. “It appears someone was able to breach the server through a custom plugin in the forum software and get access to an old backup dating December 26, 2018.”

The incident exposed details for the site’s 113,000 users, attackers completely wiped the forum’s hard drives and dumped the stolen data on a rival hacking forum.

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – OGUsers forum, hacking)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.