We are The Consortium, and we have something special for our first release.
You see for a while now we have had access to digitalplayground.com, one of the five biggest porn sites in the world. But it doesn’t need any introduction from us.
This company has security, that if we didn’t know it was a real business, we would have thought to be a joke – a joke that we found much more amusing than they will.
“This site has so many freaking holes that if I didn’t know it was a porn site, I would have mistaken it for a *****”
We did not set out to destroy them but they made it too enticing to resist. So now our humble crew leave lulz and mayhem in our path. We not only have the 72k users of this site but also over 40k plaintext credit cards including ccvs, names and expiry dates. If you want to hear more about those plaintext credit cards scroll through the MySql info further down. And of course as this is a porn site there was no shortage of .mil and .gov emails in their user list.
We also went on and rooted four of their servers, as well as gaining access to their mail boxes. Using credentials from emails we tapped into their conference call. “Is anyone besides David on the line ?” –
We were. Did we win? Sure looks that way.Digital Playground game over.
It seems credit card information of over 40,000 users have been compromised. The site has countered this by turning off their site to all but members, saying
“Due to an alleged security breach, Manwin elected to temporarily shut down Digital Playground, and related websites, on March 5, 2012. Manwin officially took over Digital Playground and related assets on March 1, 2012, and according to allegations, the potential breach may have occurred prior to that date. The safeguard and non-disclosure of private and confidential information is always a priority at our company, and management is supervising all aspects of this situation. In addition, our customer service department has been in contact with Digital Playground members to inform them of the next steps. Customers will not be billed while the site is inactive, and have been offered free access to a Manwin owned property of their choice during this time period.”
Chester Wisniewski, an Internet Security expert, advices people to not use personal credit cards on the internet, but to make online purchases with PayPal, Amazon Payments, or Google Checkout, which will keep personal information safe. He also says to not give any personal information such as phone numbers or home addresses:
“It sounds a bit paranoid and scared,” he said, “But the less information that’s out there, the better.”