


In response to this listing, ShinyHunters on Thursday decided to leak the Wishbone database on the same hacker forum for free. The database was first publicly advertised for sale by a well-regarded data breach seller on RaidForums for 0.85 Bitcoin (around $8,000) this Wednesday. This treasure trove of information could be useful to threat actors to perform follow-on phishing campaigns, credential stuffing attacks, and account takeovers. The trove of exposed data now available for all includes usernames, email addresses, mobile numbers, gender, date-of-birth, city/state/country, Facebook and Twitter access tokens, hashed MD5-hashed passwords, profile images (that included loaded images of supposed minors), and much more. This hacker is also behind the theft of 500GB from Microsoft’s private GitHub repositories, and the sale of the database of Indonesia’s largest online store, Tokopedia as well as the database of the online learning platform, Unacademy on the Dark Web.
