LeakBase, one of the largest darknet hacking forums, has been dismantled in a massive law enforcement operation. The operation led to the seizure of details from over 142,000 registered members and involved multiple search warrant executions and "knock-and-talk" interviews.
About LeakBase
First appearing in 2021, LeakBase functioned as a three-in-one platform: a forum, marketplace, and archive. It allowed users to discuss hacking-related topics, buy and sell breached data, and access a vast archive of historical data breaches.
The Investigation
The exact duration of the investigations remains unclear, but it is known that on March 3rd and 4th, the FBI, alongside authorities from 13 other countries, took part in this massive operation. These countries included Australia, Belgium, Canada, Germany, Greece, Kosovo, Malaysia, the Netherlands, Poland, Portugal, Romania, Spain, and the United Kingdom. The operation resulted in the seizure of LeakBase's servers and its domain.
As the servers were seized, multiple warrants were executed, along with "knock-and-talk" interviews. Authorities across the U.S. and Europe visited some of the forum's most active members, interviewing them and asking questions. While arrests have been made, the exact number remains unclear. Official reports indicate that "around 100 enforcement actions were conducted worldwide, including measures against 37 of the platform's most active users".
Investigations & Consequences
The LeakBase website is currently inaccessible, replaced by a seizure warning. Authorities claim they now have complete access to the forum's database. While the extent of this access depends on how the server was set up and what logs were kept, the data could prove to be a massive trove of information. For authorities, this could even help facilitate arrests years down the line.
Europol is attempting to scare off potential future cybercriminals by including a "No one is invisible online" section in their report. They claim, "Law enforcement authorities are proactively continuing to trace digital trails to unmask additional offenders and establish their real-world identities." While it is true that law enforcement can trace users of the darknet, this becomes much harder to do when all the proper opsec precautions are taken.
Conclusion
LeakBase is the latest hacking forum to fall in a campaign orchestrated by authorities targeting such platforms over the past couple of years. The FBI report on the matter even proudly mentions the previous seizures of RaidForums and BreachForums in 2022 and 2023. Given that authorities knew the most active users and interviewed them on the same day as the "seizure," it suggests that the platform had been compromised beforehand, allowing authorities time to analyze the data. However, this is just our conclusion based on the available information.
0 Comments