SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have leaked a database supposedly associated with VirtualMacOSX.com. The information reportedly affects 10,000 customers.
The data was discovered on a public forum that hosts message boards for database downloads, leaks, and cracks. The post author shared a 34-line database sample and made the full database accessible for free to anyone on the forum who replies or likes the post.
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
SafetyDetectives’ Cybersecurity Team analyzed a section of the dataset to verify its authenticity. Although the data looked genuine, and we noticed indicators in invoices sent to VirtualMacOSX, we could not fully confirm it belonged to their customers since we chose not to test the exposed credentials for ethical reasons.
The entire datasetconsisted of 176,000 lines split across three separate .txt files named ‘tblcontacts,’ ‘tbltickets,’ and ‘tblclients.’
The sensitive information allegedly belonging to VirtualMacOSX’s customers included:
User ID
Full name
Company name
Email
Full physical address
Phone number
Password
Password reset key
SafetyDetectives’ Cybersecurity Teamsaw customers’ financial data such as:
Bank name
Bank type
Bank code
Bank account
SafetyDetectives’ Cybersecurity Team
This data is important because it can be used by criminals to target affected clients.
According to its website, VirtualMacOSX serves 102 countries and has offered “Apple Macintosh cloud based computing since 2012. With the greatest range of cloud based Apple products and services available anywhere on the Web.”