AweBux

We've seen a steady increase in credential stuffing attacks targeting online advertising and "get paid to" (GPT) platforms, often fueled by readily available stealer logs. What struck us about the recent AweBux breach wasn't the sophistication of the attack, but the sheer volume of user data exposed in plain text. The data, circulating on a popular hacking forum, paints a clear picture of the risks associated with reusing credentials across multiple online platforms, and the potential for even seemingly low-value accounts to be leveraged for malicious purposes.

### AweBux Breach: 2.4M User Records Exposed on Hacking Forum

The AweBux breach involves a massive data dump of **2.4 million user records** from the AweBux "get paid to" (GPT) website. The data was discovered on **June 5, 2024**, circulating on a well-known hacking forum frequented by credential stuffing actors and botnet operators. What caught our attention was the simplicity of the data structure: a raw CSV file containing usernames, email addresses, and, most alarmingly, **passwords stored in plain text**. The lack of even basic hashing or salting makes this breach particularly dangerous, as the exposed credentials can be immediately used for account takeover attempts across other services. This breach highlights the ongoing risks associated with poor security practices by online platforms, even those with limited direct financial value. The breach ties into the broader threat theme of credential reuse and the automation of attacks using readily available data dumps.

Breach Stats:

* **Total records exposed:** 2,400,000+
* **Types of data included:** Emails, usernames, plain text passwords
* **Sensitive content types:** Potentially PII depending on user profiles; payment information not confirmed but possible
* **Source structure:** Raw CSV file
* **Leak location(s):** Hacking forum (name withheld for security reasons).

The AweBux breach has not yet been widely reported in mainstream cybersecurity news outlets, but discussions are emerging on several forums. One forum user commented, "Another day, another plain text password leak. Seriously, how hard is it to hash?" This sentiment reflects the wider frustration within the security community regarding the persistence of such basic security failures. While specific attribution is difficult at this stage, the availability of the data on a forum known for hosting stealer logs suggests a potential connection to malware infections on user devices. Several open-source password cracking tools could easily be used to further compromise accounts using the AweBux data as a starting point.