Hackers Grab Deluge and qBitTorrent Forum Databases

[Ernesto]

Several torrent related websites have reportedly been compromised by hackers, exposing the personal details of thousands of members.

Among the targeted sites are the forums of torrent clients Deluge and qBitTorrent, of which the user databases appeared online several days ago.

Both forums have thousands of members, whose emails, hashed passwords and other information was posted on the website Databoss.io.

The same site also lists the user database of the torrent site SumoTorrent.sx, which was reportedly breached earlier.

Databoss

TorrentFreak reached out to the Deluge team, who have taken down their site as a precaution. This means that the popular cross-platform torrent client can’t be downloaded at the moment.

The Databoss hacker(s) placed a hello.txt file on the site as proof for the breach, but it’s not clear how the site was compromised.

“We’re currently working with our hosting provider to identify and resolve the issue and we’ve taken down the site until that time,” the Deluge team informs TF.

In any case, for now Deluge advises its forum members to change their passwords at other services, if they used the same password more than once.

The qBitTorrent team informs TF that they are looking into the issue on their end. They have disabled the forums as a precaution and plan to release a detailed statement later on.

SumoTorrent, meanwhile, informs us that they are not aware of any breach, but they are investigating the claims.

The Databoss.io website is selling access to the hacked information, starting at $2 per day.

For now no plaintext passwords are available for the torrent related sites, although this may change in the near future. “The databases are in the process of being cracked to the highest percentage possible,” Databoss writes on RealityForum.

However, at the time of writing the website is inaccessible. According to the person in charge, the site was pulled offline temporarily after an abuse complaint from the owner of another affected site, realforums.org.

Update: TorrentFreak has seen additional info suggesting that the SumoTorrent breach is real.

Source: TorrentFreak, for the latest info on copyright, file-sharing, torrent sites and  ANONYMOUS VPN services.



Originally Published: Mon, 21 Dec 2015 18:56:05 +0000
source

[᠎]

This is one of the reasons TPB and SB deliberately restrict the amount of information you can provide us with to username, password and email address.

Your username can be anything, and should be different to any username you use on any other site.

Same for your password.

And the same for your email address. Beyond the confirmation email there is no need for you to be able to receive messages from us, or other site members, on an ongoing basis. So you should use a disposable address to register. [Even if you later forget your password and need help regaining access, all you need is to know what the email address is you don't have to still be able to access it, and we can reset your password for you.]

The reality is that although we take as much care as we can with your information, our system is sitting there at the mercy of wannabe hackers 24/7. And you may recall that the Swedish police literally stole our servers a few years ago so they could go to town at their leisure. You SHOULD EXPECT our systems to be compromised sooner or later and take (if you have not already taken) steps to ensure that when that happens you won't have to give a fuck.

The same goes for every other website you visit, they just won't be as upfront about it.

[dolly_cat]

It's a stupid idea to ask so many personal infos from users especially on a torrent website. And users will be stupier if they will give them away.

[RobertX]

I guess I shouldn't tell everyone that my name is Robert.

[Tw1s7]

@ dolly you are right +1 : its ridiculous and hard to believe that have so stupid peaple on this galaxy