InfoSecBulletin Cybersecurity for mankind
SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have leaked a database supposedly associated with VirtualMacOSX.com. The information reportedly affects 10,000 customers.
The data was discovered on a public forum that hosts message boards for database downloads, leaks, and cracks. The post author shared a 34-line database sample and made the full database accessible for free to anyone on the forum who replies or likes the post.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
SafetyDetectives’ Cybersecurity Team analyzed a section of the dataset to verify its authenticity. Although the data looked genuine, and we noticed indicators in invoices sent to VirtualMacOSX, we could not fully confirm it belonged to their customers since we chose not to test the exposed credentials for ethical reasons.
The entire dataset consisted of 176,000 lines split across three separate .txt files named ‘tblcontacts,’ ‘tbltickets,’ and ‘tblclients.’
The sensitive information allegedly belonging to VirtualMacOSX’s customers included:
User ID
Full name
Company name
Email
Full physical address
Phone number
Password
Password reset key
SafetyDetectives’ Cybersecurity Teamsaw customers’ financial data such as:
Bank name
Bank type
Bank code
Bank account
This data is important because it can be used by criminals to target affected clients.
According to its website, VirtualMacOSX serves 102 countries and has offered “Apple Macintosh cloud based computing since 2012. With the greatest range of cloud based Apple products and services available anywhere on the Web.”
