Hi guys,
Back with more bad news it seems, (been exposing multiple exchanges recently being hacked and admins giving zero f*cks) Africunia [AFCASH] website was hacked back in May, and contact was made to the admins on Telegram (see screenshots) on May 31st~ and they were informed that their website was hacked and all databases were dumped, with root access gained.
The admin responded with little to no care, with threats to finish off the conversation. It was my understanding the site was then taken down for "maintenance" AKA resolving the issue. I should have known better.
Fast forward 5+ months later, and their site is still as vulnerable as ever, with customers logging in as recently as 1-2 weeks ago to withdraw AFCASH. phpmyadmin mysql database user hash was cracked instantly and all database(s) are available for dumping.
This is a warning to anyone who uses https://www.africunia.com or who purchased in their ICO a while ago, change your passwords (especially if you re-use passwords) and so forth. I am going to submit this to https://haveibeenpwned.com/ so people have multiple chances to see their data was involved in a breach.
Chat soon.
Back with more bad news it seems, (been exposing multiple exchanges recently being hacked and admins giving zero f*cks) Africunia [AFCASH] website was hacked back in May, and contact was made to the admins on Telegram (see screenshots) on May 31st~ and they were informed that their website was hacked and all databases were dumped, with root access gained.
The admin responded with little to no care, with threats to finish off the conversation. It was my understanding the site was then taken down for "maintenance" AKA resolving the issue. I should have known better.
Fast forward 5+ months later, and their site is still as vulnerable as ever, with customers logging in as recently as 1-2 weeks ago to withdraw AFCASH. phpmyadmin mysql database user hash was cracked instantly and all database(s) are available for dumping.
This is a warning to anyone who uses https://www.africunia.com or who purchased in their ICO a while ago, change your passwords (especially if you re-use passwords) and so forth. I am going to submit this to https://haveibeenpwned.com/ so people have multiple chances to see their data was involved in a breach.
Chat soon.
:O damn, i heard of that one, but remember i thought it was kinda shifty
now i wonder if that was a sign of their type of incompetence, or if it was their plan all along for some kind of "we lost our data" scheme in the end
thanks for the heads up man, hopefully noone's personal info or anything gets sold off : / (thats always my fear)