{"id":20151,"date":"2022-09-20T16:10:56","date_gmt":"2022-09-21T00:10:56","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2022\/09\/20\/news-13884\/"},"modified":"2022-09-20T16:10:56","modified_gmt":"2022-09-21T00:10:56","slug":"news-13884","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/09\/20\/news-13884\/","title":{"rendered":"Kiwi Farms breached, user data potentially exposed"},"content":{"rendered":"

The operators of a site known to most observers for being in a recent state of flux<\/a> have announced a forum breach. Kiwi Farms, which gained a reputation for sophisticated trolling and doxxing<\/a>, was recently dropped by Cloudflare after a sustained campaign to have the DDoS mitigation and cloud hosting service abandon the forum.<\/p>\n

The site has since returned, but with a major problem: a breach<\/a> which potentially reveals a large amount of user data.<\/p>\n

The breach revealed<\/h2>\n

The site creator had the following to say in relation to the compromise:<\/p>\n

The forum was hacked. You should assume the following.<\/em><\/p>\n

Assume your password for the Kiwi Farms has been stolen.<\/em><\/p>\n

Assume your email has been leaked.<\/em><\/p>\n

Assume any IP you’ve used on your Kiwi Farms account in the last month has been leaked.<\/em><\/p>\n

The attack made use of the synergy between the main forum site and a second site, XenForo. The latter is a commercial internet forum software package<\/a> written in PHP. Attackers created a webpage disguised as an audio file to XenForo, loading this page elsewhere in a manner which caused user authentication cookies to be sent off-site. The main admin account for the forum was apparently hijacked in this same fashion.<\/p>\n

The fallout from a forum compromise<\/h2>\n

We often warn about using forums without implementing the proper failsafes and protection, and a breach such as this hammers home the point. A lot of users on the site may now have a lot of information exposed that they’d really rather not. Similarly, curious observers or even unwary researchers or law enforcement may have registered and not considered the possibility of a data leak.<\/p>\n

This data could end up anywhere, and there’s no surefire way to know what’s been taken. It could end up on other forums, data dumps, or in the hands of law enforcement agencies. No matter what site you’re registered on, you should consider:<\/p>\n