Hey guys,

So aswell as being the Director of Marketing for a cryptocurrency exchange, I double as a pen-tester/infosec researcher, and recently came across a database being sold on the deepweb purporting to be from BitCoinRush.io.

I obtained a copy and checked some of the logins against their website and to my surprise they worked. Albeit most of them were banned for suspicious activity, probably due to people logging in and attempting to rob the balances from IP's originating in different countries than where the user signed up from.

I contacted the admins via email ( https://imgur.com/a/S9nTh3h ) to no avail. And apparently from what I can tell, they most likely know but haven't informed their users, which is a real piece of crap move considering how many people these days re-use passwords across many websites and is the number 1 attack happening against people these days.

If you use this service please change your passwords immediately.


https://imgur.com/a/sAgn6Vh