InfoSecBulletin Cybersecurity for mankind
SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have leaked a database supposedly associated with VirtualMacOSX.com. The information reportedly affects 10,000 customers.
The data was discovered on a public forum that hosts message boards for database downloads, leaks, and cracks. The post author shared a 34-line database sample and made the full database accessible for free to anyone on the forum who replies or likes the post.
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
SafetyDetectives’ Cybersecurity Team analyzed a section of the dataset to verify its authenticity. Although the data looked genuine, and we noticed indicators in invoices sent to VirtualMacOSX, we could not fully confirm it belonged to their customers since we chose not to test the exposed credentials for ethical reasons.
The entire dataset consisted of 176,000 lines split across three separate .txt files named ‘tblcontacts,’ ‘tbltickets,’ and ‘tblclients.’
The sensitive information allegedly belonging to VirtualMacOSX’s customers included:
User ID
Full name
Company name
Email
Full physical address
Phone number
Password
Password reset key
SafetyDetectives’ Cybersecurity Teamsaw customers’ financial data such as:
Bank name
Bank type
Bank code
Bank account
This data is important because it can be used by criminals to target affected clients.
According to its website, VirtualMacOSX serves 102 countries and has offered “Apple Macintosh cloud based computing since 2012. With the greatest range of cloud based Apple products and services available anywhere on the Web.”
