To get the "verified" list, users were often asked to register for a forum or download a text file, which served as a way for bad actors to collect new emails and IP addresses for future attacks.
In October 2019, the search for "verified" premium accounts reached a peak. WTFPass was a high-traffic hub that required a paid subscription to access its full library of niche content. Because the subscription fees were a barrier for many, "leeching" communities and "combolist" sites began surfacing lists of usernames and passwords, claiming they were verified and working as of October 13, 2019. How These "Verified" Accounts Were Obtained wtfpass premium accounts 2 13 october 2019 verified
Users were tricked into entering their login details on fake mirror sites. To get the "verified" list, users were often
The keyword points toward a specific moment in internet history when users were searching for leaked credentials for the popular adult content aggregator, WTFPass. Because the subscription fees were a barrier for
Hackers used databases from other site breaches (like LinkedIn or Yahoo) and tested those same email/password combinations on WTFPass.
