Security News > 2022 > August > Anonymous poop gifting site hacked, customers exposed

"A simple way to send a piece of shit in a box around the world," ShitExpress describes what is a prank web service where customers can purchase and deliver real animal feces to friends or frenemies located anywhere in the world.

Co hacking forum and a well-known hacker who has previously stolen private data from companies like QuestionPro and Mangatoon.

The hacker also previously put stolen data of 7 million Robinhood customers for sale online.

According to a forum post authored by pompompurin, the hacker recently visited ShitExpress to send a box of poop to cybersecurity researcher Vinny Troia.

At one point, Troia even mawkishly launched a change.org petition, asking international leaders to extradite pompompurin to the U.S. This Tuesday, when pompompurin visited ShitExpress to send a token of appreciation to Troia, the hacker realized the website was vulnerable to SQL Injection.

Pompompurin further confirmed having exploited ShitExpress via SQL Injection but that they did not extort the site owners with a ransom demand.

News URL

https://www.bleepingcomputer.com/news/security/anonymous-poop-gifting-site-hacked-customers-exposed/