Worrying attack sees 10,000 records allegedly belonging to VirtualMacOSX leaked - here's what we know

Security researchers find threat actor advertising a major databaseThe archive allegedly belongs to VirtualMacOSX.comIt contains passwords, bank data, and other sensitive informationThousands of records belonging to VirtualMacOSX users, including banking information, have been leaked on a popular hacking forum recently, experts have claimed.Cybersecurity researchers Safety Detectives say they found a new thread on a popular clearweb hacking forum (a forum hosted on the mainstream internet), in which the poster offered a database to anyone who would comment, or otherwise interact with the thread, for free.Allegedly, the database belongs to the customers of VirtualMacOSX.com, a cloud-based service that provides virtual Mac OS X servers and desktops, and contains 176,000 lines, split across three separate .txt files. In these files were contained people’s user IDs, full names, company names, email addresses, postal addresses, phone numbers, passwords, password reset keys, bank names, bank types, bank codes, bank accounts, and various support tickets.Reader offer: Get 60% off RoboForm password managerNew users can take advantage of RoboForm’s exclusive deal and get 60% off the Premium Plan. With this deal, you can get unlimited password storage, one-click login & autofill, password sharing, two-factor authentication for added protection, cloud backup, and emergency access for trusted contacts. To claim this deal, visit this link and sign up for the Premium Plan to lock in this huge discount.View DealOperations stableThe threat also contained a 34-line sample of the database, Safety Detectives said, adding that their superficial analysis confirmed the data’s authenticity.“Although the data appeared genuine and we saw indicatives in invoices sent to VirtualMacOSX, we could not definitively confirm that the data belonged to VirtualMacOSX’s customers as, due to ethical considerations, we refrained from testing the exposed credentials,” the researchers said.We would argue that it is unusual for cybercriminals to give away a brand new database containing both banking data and passwords for free, so it could also be that the database is either fake, or recycled from a previous breach. A quick Google search showed no previously reported breaches at VirtualMacOSX.com.In any case, users should definitely reset their passwords, including on any other platforms where they might have used the same set of credentials.Furthermore, they should closely monitor their bank accounts for any suspicious transactions. Finally, they should be on the lookout for well-crafted phishing emails impersonating VirtualMacOSX.com.You might also likeOver a billion credentials stolen were stolen in malware attacks in 2024Take a look at our guide to the best authenticator appWe've rounded up the best password managers