‼️ New BreachForums-like clone: Clearnet: pwnforums[.]st Dark Web: http://pwnfrm7rbf6kyerigxi...

Summary

A new BreachForums-like marketplace clone named 'pwnforums' has emerged, operating on both clearnet (pwnforums.st) and dark web (.onion) domains. BreachForums clones typically serve as illegal marketplaces for trading stolen data, credentials, and malware. This represents continued threat actor infrastructure proliferation following previous BreachForums takedowns.

Indicators of Compromise

• domain — pwnforums.st
• url — http://pwnfrm7rbf6kyerigxi677lcz5ifmoagdbqqknwdu2by27wfdst5qmqd.onion

Entities