12,194guides5,442members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

Data breach

Zoosk (2020) data breach

23,927,853 accounts · breached January 12, 2020

Have I Been Pwned treats this breach as sensitive: it does not reveal publicly whether a particular address is in it. Only the owner of an address can check, after verifying it.

What happened

In January 2020, the online dating service Zoosk suffered a data breach which was subsequently shared extensively across online hacking communities. The breach contained 24 million unique email addresses alongside extensive personal information including genders, sexualities, dates of birth, physical attributes such as height and weight, religions, ethnicities and political views. The breach also allegedly exposed MD5 password hashes, although the data circulating in hacking circles had this field nulled out. The breach was provided to HIBP by breachbase.pw.

Description by Have I Been Pwned

What data leaked

  • Dates of birth
  • Drinking habits
  • Education levels
  • Email addresses
  • Ethnicities
  • Family structure
  • Genders
  • Geographic locations
  • Income levels
  • Names
  • Nicknames
  • Physical attributes
  • Political views
  • Relationship statuses
  • Religions
  • Sexual orientations
  • Smoking habits

What to do if you had an account

  1. Turn on two-step sign-in. Enable two-factor authentication where the service offers it, preferably with an authenticator app or a passkey. A leaked password alone is then not enough to get in.
  2. Expect targeted phishing. Leaked contact details are used to write convincing fake messages that mention the breached company or your real name. Do not click links in unexpected emails or texts about this account; go to the site by typing its address.
  3. Guard against identity fraud. Identity documents and dates of birth cannot be changed like a password. Consider a credit freeze or fraud alert where your country offers one, and be wary of anyone who 'verifies' you using those details.
  4. Sensitive personal data. This breach includes sensitive categories of personal data. Scammers and blackmailers use such details to pressure people. Do not pay, and report extortion attempts to the police.

Check your email at haveibeenpwned.com

We do not run email lookups ourselves. The search is done on haveibeenpwned.com, the service this list comes from.

5,442 members already hereReading, writing, commenting and voting. 0 verified · 167 joined this year
All membersJoin