magicseller.co.kr, a digital platform based in South Korea, has allegedly been compromised, resulting in the sale of a significant database on a cybercrime forum. The threat actor claims to be in possession of 500,000 user records related to the site. The actor has provided a sample of the data to verify the authenticity of the leak, although the sample provided appears to contain Portuguese language content, suggesting potential discrepancies in the data’s origin or a specific regional subset of the service.
According to the actor, the allegedly compromised data includes:
-
Full names
-
Email addresses
-
Phone numbers
-
IP addresses
-
Course or interest categories
-
User messages and inquiries
-
Lead identification numbers












