Security News > 2020 > May > Hackers Breach 3.5 Million MobiFriends Dating App Credentials

The credentials of 3.5 million users of MobiFriends, a popular dating app, have surfaced on a prominent deep web hacking forum, according to researchers.
The compromised credentials were originally posted for sale on an underground forum on Jan. 12 by a threat actor named "DonJuji," according to a RBS post on Thursday.
The credentials were later shared for free however on April 12 by a different threat actor on the same forum, researchers said.
"Furthermore, the exposure of user credentials allows threat actors to check them against other websites in a brute-force fashion. If the credentials have been re-used, the threat actors may be able to gain access to more valuable accounts i.e. banking accounts, social media accounts, etc."
Neither RBS nor Threatpost has heard back from MobiFriends regarding the compromised data despite multiple attempts at contact.
News URL
https://threatpost.com/hackers-breach-3-5-million-mobifriends-dating-app-credentials/155590/
Related news
- Hackers leak configs and VPN credentials for 15,000 FortiGate devices (source)
- HPE investigates breach as hacker claims to steal source code (source)
- CISA: Hackers still exploiting older Ivanti bugs to breach networks (source)
- Hackers exploiting flaws in SimpleHelp RMM to breach networks (source)
- Hackers spoof Microsoft ADFS login pages to steal credentials (source)
- Hackers exploit Cityworks RCE bug to breach Microsoft IIS servers (source)
- Chinese hackers breach more US telecoms via unpatched Cisco routers (source)
- Hackers pose as employers to steal crypto, login credentials (source)
- Orange Group confirms breach after hacker leaks company documents (source)