200 Million User Records Stolen! Hackers Breach P***Hub

This video by Seytonic covers three major cybersecurity news stories involving a massive data breach, a new vulnerability in AI browsers, and a sophisticated NFC banking scam.

Massive Data Breach at a Major Adult Site

• The Breach: Hackers known as “Shiny Hunters” claim to have stolen 94 GB of data containing over 200 million user records.
• Data Exposed: The stolen information includes email addresses, watch histories (video names, URLs, keywords), download logs, and search history.
• The Cause: The site blames a breach at “Mixpanel,” a third-party analytics company they previously used. However, Mixpanel denies involvement, stating the last data access was by a legitimate employee account from the site’s parent company two years ago.
• The Risk: While full names were not leaked, email addresses can be cross-referenced with other data breaches to identify users, leading to potential extortion or “sextortion” attempts.

“Hashjack” Vulnerability in AI Browsers

• The Exploit: Researchers discovered that many AI browser assistants (like Chrome’s Gemini and others) can be tricked using the “fragment” part of a URL (the text after a #).
• How it Works: Attackers can add malicious instructions to the end of a trusted URL. Since the fragment is ignored by the website server but read by the AI, the assistant may follow hidden commands to give dangerous medical advice or exfiltrate banking data in the background.
• Status: Perplexity and Microsoft have patched this issue. Google reportedly categorized it as “intended behavior” and has not issued a fix.

NFC Relay Malware Scam

• The Method: Russian police recently arrested a gang using NFC-based malware to rob bank accounts. Victims were tricked into downloading a fake banking app and tapping their physical card against their phone.
• The Technology: The criminals used “NFCGate,” an open-source tool, to relay the card’s signal in real-time to a phone held by an accomplice at an ATM, allowing them to withdraw cash instantly.
• Scale: The gang is accused of over 600 offenses. Similar malware is becoming increasingly popular, specifically targeting banking users in Brazil and Eastern Europe.