Cyber Attack & Data Breach · darkwebinformer.com

Actor Claims AFTT and FRBTT Data Breach Exposed Subscriber Records and Admin Credentials

Sep 16, 2026 · Original article ↗

Summary

Venus1337 claims to be selling data from AFTT and FRBTT, including subscriber and user records and 87 administrators’ credentials. The breach and alleged file-upload RCE remain unverified.

Key points

Forum actor Venus1337 claims to be selling data from AFTT and FRBTT; the claim is unverified.
The alleged data includes 66,852 subscriber records and 17,441 user records.
The post claims credentials for 87 club administrator accounts, including plaintext passwords.
Venus1337 claims initial access came through a file-upload remote code execution vulnerability.
The post also alleges a deployed web shell and hardcoded database credentials in secret.php.

Article Details

Victim Organization: AFTT and FRBTT
Incident Type: Alleged data breach involving file-upload remote code execution and a deployed web shell
Data Types Exposed: Subscriber records
User records
Club administrator credentials, including plaintext passwords
Affected Records: The claim lists 66,852 subscriber records, 17,441 user records, and credentials for 87 club administrator accounts; overlap between these categories is not specified.
Ransom Or Extortion: Venus1337 claims to be selling the data. No ransom demand is reported.
Claim Status: claimed

MITRE ATT&CK

T1505.003 · Web ShellThe breach claim says a web shell was deployed.

Threat Actors

Venus1337Forum actor who claims to be selling data from AFTT and FRBTT and says initial access used an insecure file-upload RCE; the breach claim remains unverified.