Hacker leaks database of dark web hosting provider

A hacker has leaked on the web these days the database of Daniel’s Web hosting (DH), the largest no cost website internet hosting provider for darkish net products and services.

The leaked info was attained after the hacker breached DH previously this calendar year, on March 10, 2020. At the time, DH operator Daniel Winzen instructed ZDNet the hacker breached his portal, stole its database, and then wiped all servers.

On March 26, two months immediately after the breach, DH shut down its provider for fantastic, urging buyers to shift their internet sites to new dim web hosting companies. Around 7,600 web-sites — a third of all dim world wide web portals — went down adhering to DH’s shutdown.

Delicate facts leaked on the web

Currently, a hacker likely by the name of KingNull uploaded a copy of DH’s stolen databases on a file-web hosting portal, and notified ZDNet, because we broke the information about the DH hack in March.

In accordance to a cursory investigation of present-day details dump, the leaked knowledge features 3,671 email addresses, 7,205 account passwords, and 8,580 non-public keys for .onion (dim world wide web) domains.

“The leaked database contains delicate details on the owners and consumers of several thousand darknet domains,” risk intelligence organization Underneath the Breach told ZDNet these days just after we questioned the business to review the leak.

Beneath the Breach said the leaked details can be utilised to tie the owners of leaked email addresses to selected dark world wide web portals.

“This info could significantly support legislation enforcement observe the persons running or having component in illegal functions on these darknet sites,” Underneath the Breach advised ZDNet.

Furthermore, if the web page proprietors moved their dark world-wide-web portals to new internet hosting providers but continued to use the aged password, hackers could also take more than their new accounts — if they crack the leaked DH hashed passwords.

On the other hand, when risk intelligence corporations and legislation enforcement may possibly comb the databases in search of clues of end users who hosted cybercrime-associated websites, the leaked data may possibly also put the owners of dissident and political sites at possibility of getting their identities uncovered by oppressive regimes, which could have dire repercussions if all those end users did not consider important techniques to safeguard their identities.

IP addresses, which could have assisted law enforcement in some investigations, were not involved in the dumped knowledge.

Next time DH was hacked

The March 2020 hack was the second time that DH experienced a safety breach. The web page had been formerly hacked in November 2018 when an intruder similarly breached the site’s backend database server and deleted all internet sites. More than 6,500 had been wiped at the time, but no facts was at any time leaked.

On the other hand, DH is not the only significant dim world-wide-web web hosting supplier to have been hacked. In 2017, the exact same Nameless hacker collective took down Liberty Hosting II after they discovered that the hosting supplier was sheltering youngster abuse portals.

KingNull, who also claimed to be section of the Anonymous hacker collective, did not return an e mail looking for extra remark.

Pursuing the March 2020 hack, Winzen explained to ZDNet that he continue to designs to relaunch the services in several months, but only just after several advancements, and that this was not a priority.