{"id":5675,"date":"2025-07-27T10:05:14","date_gmt":"2025-07-27T10:05:14","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/07\/27\/infamous-breachforums-is-back-online-with-all-old-accounts-and-posts-restored\/"},"modified":"2025-07-27T10:05:14","modified_gmt":"2025-07-27T10:05:14","slug":"infamous-breachforums-is-back-online-with-all-old-accounts-and-posts-restored","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/07\/27\/infamous-breachforums-is-back-online-with-all-old-accounts-and-posts-restored\/","title":{"rendered":"Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored"},"content":{"rendered":"<p>    Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>BreachForums, the notorious cybercrime discussion board that vanished from the clearnet after a law-enforcement seizure in, quietly re-opened this week under its original administrators and with the entire historical archive of user accounts, posts, and private messages intact.<\/p>\n<p>The unexpected reemergence has alarmed security researchers and relieved the forum\u2019s criminal users, many of whom had come to terms with losing their reputational standing and escrowed data when the site vanished.<\/p>\n<p>The relaunch was announced in a post titled \u201cStatement Regarding <a href=\"https:\/\/cybersecuritynews.com\/tag\/breachforums\/\" target=\"_blank\" rel=\"noreferrer noopener\">BreachForums<\/a>\u201d from an administrator using the handle \u201cNA,\u201d who insisted that no members of the core staff had been arrested during the earlier takedown.<\/p>\n<p>According to the <a href=\"https:\/\/cybersecuritynews.com\/breachforums-mybb-0-day\/\" target=\"_blank\" rel=\"noreferrer noopener\">statement<\/a>, the forum\u2019s domain was voluntarily suspended by its registrar in April after an \u201cidentified zero-day vulnerability\u201d in MyBB, the underlying forum software, was exploited against several communities.<\/p>\n<p>The administrators claim the bug has been patched and that the domain was restored once they \u201caddressed specious misconceptions\u201d pushed by rival sites and anxious users.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiBIvWFbkPH9m4lkjN9AYGlcbbE7FNmyZ7dL00KDpW0bvi19zzfGcPE_oaLRtZrTH504F1lErzOil951dBbADSDSGGul6mi2pEBal5JewjvtgMUvTTU7mCSASilUiEF8jZ5bhmoCGqiGGzFKkEggdVdSdsgym-vg2oHOzR1lqYBCKPoV-VaZPaseMv6Ow0Z\/s16000\/breachforum2.webp?ssl=1\" alt=\"\"><\/figure>\n<p>Although the message seeks to project normality, \u201cAs far as we\u2019re concerned, it is business as usual,\u201d the post reads, the timing of the comeback raises questions for investigators who believed the FBI\u2019s March operation had permanently crippled the market for hacked databases and malware builders that BreachForums facilitated.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEir1Eq7TNF9ItoG3kDavtr39lL8HfWnRbB_9BrdrzygH3aNel6nn8inoi7Fito1Sj3XflrK6gzI36frJ2BvsB8WeCyOyqbzq-Zm6JnRf04fzPjYOSF-kqZIrQceiuIvhI7RJsjhu3ZS-hYTvPK8IxHQxtv2ystm0y1YNYexmyGYOWVfzHwpRpzdKMcr1VSM\/s16000\/breachforum1.webp?ssl=1\" alt=\"\"><\/figure>\n<p>Less than four months later, the same user handles, reputation scores, and <a href=\"https:\/\/cybersecuritynews.com\/cryptocore-cryptocurrency-scam-draining-wallets\/\" target=\"_blank\" rel=\"noreferrer noopener\">cryptocurrency wallets<\/a> have reappeared, suggesting that the site\u2019s operators maintained secure off-site backups and never surrendered encryption keys.<\/p>\n<p>Security vendors tracking dark-web activity note that the reconstituted forum displays more than 7.3 million total posts across 13,000 threads, numbers identical to the snapshot taken days before the takedown, further corroborating the administrators\u2019 claim that \u201cyour accounts, your posts, your reputation, nothing has been lost or altered\u201d.<\/p>\n<p>To reassure its 340,000 registered members, BreachForums has introduced what it calls a \u201crevamped moderation system\u201d and promises \u201cregular updates\u201d about behind-the-scenes legal challenges.<\/p>\n<p>The post also hints at \u201cchanges in the coming weeks\u201d designed to improve transparency, a pledge skeptics dismiss as mere public-relations theater given the platform\u2019s illicit purview. <\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 92%,rgb(169,184,195) 100%)\">Experience faster, more accurate phishing detection and enhanced protection for your business with real-time sandbox analysis-&gt; <strong><a href=\"https:\/\/intelligence.any.run\/plans?utm_source=csn_jul&amp;utm_medium=article&amp;utm_campaign=freemium-exclusive&amp;utm_content=plans1&amp;utm_term=220725\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Try ANY.RUN now<\/a><\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/breachforums-back-online\/\">Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Guru Baran<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/breachforums-back-online\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored BreachForums, the notorious cybercrime discussion board that vanished from the clearnet after a law-enforcement seizure in, quietly re-opened this week under its original administrators and with the entire historical archive of user accounts, posts, and private messages intact. The unexpected reemergence has alarmed [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63],"tags":[130],"class_list":["post-5675","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5675"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=5675"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/5675\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=5675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=5675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=5675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}