A user on a dark web forum has shared what allegedly appears to be the sensitive data of approximately 10,000 users of virtualmacosx.com, also known as vmOSX. The company in question is a U.S.-based cloud service provider that offers virtual Mac OS X servers and desktops, a critical service for developers and businesses needing remote access to a macOS environment for tasks like iOS app development. The appearance of this data online could present significant privacy and security risks to the platform’s user base.
The data was shared by a threat actor on a known hacking forum. Instead of claiming to have breached the website, the user simply shared the database allegedly belonging to the company. The shared information could be exploited by malicious actors for various nefarious purposes, including targeted phishing campaigns, identity theft, and other fraudulent activities.
The allegedly shared data includes the following user details:
- Full Names
- Company Names
- Email Addresses
- Hashed Passwords
- Physical Addresses (including street, city, state, and country)
- Phone Numbers
- IP Addresses
- Account Status
- Account creation and last login dates