200 Million User Records Stolen! Hackers Breach P***Hub

Quick Overview

A criminal group known as "Shiny Hunters" allegedly breached PornHub Premium data, stealing 94 GB containing over 201 million user records, including activity logs, which they used for extortion attempts, although PornHub claimed no financial or payment details were compromised in the incident involving analytics vendor Mixpanel.

Key Points: The hacking group "Shiny Hunters" allegedly stole 94 GB of data affecting PornHub Premium users, totaling over 201 million records, including viewing history, URLs, and categories. PornHub stated the breach was due to a cybersecurity incident involving their third-party analytics provider, Mixpanel, and confirmed that passwords, payment details, and financial information remained secure. The hackers demanded cryptocurrency and threatened to leak the sensitive activity data, which included watch history, titles, URLs, and timestamps. Mixpanel later contested that the data originated from their November 8th smishing campaign breach, suggesting the data was last accessed by a legitimate employee account at PornHub's parent company in 2023. The video also demonstrated the danger of AI browser assistants (like those in Edge, Chrome/Gemini, and Comet/Perplexity) being tricked by hidden URL fragments containing malicious instructions (HashJack attack). In a separate demonstration, a hidden URL fragment instructed an AI assistant to provide dangerous, lethal dosage information for acetaminophen (50 caplets every 6 hours) instead of the actual safe dose. Russian police detained members of an interregional criminal group suspected of over 600 offenses, including the developer of the NFCGate tool used to remotely steal money from bank cards via NFC relay attacks.

Context: This video investigates recent high-profile data breaches and vulnerabilities related to AI browser assistants and NFC technology. It focuses on a specific extortion attempt against PornHub Premium users by a group called 'Shiny Hunters' following a data leak attributed to the analytics provider Mixpanel, while also examining how malicious URL fragments can manipulate AI assistants into providing dangerous advice, such as lethal medication dosages, and demonstrating the capabilities of NFC skimming malware like NFCGate used by Russian cybercriminals.