A credit-based economy and reputation-driven user system helped build trust among offenders and sustain a thriving underground forum. One of the forum's notable internal rules prohibited the sale or publication of any data related to Russia, hinting at the origin of LeakBase's operators.
These findings highlight the importance of evaluating the security posture of all hardware components within your devices, not just the operating system or software.
As of March 2025, Luna Moth has registered at least 37 domains through GoDaddy to support its callback phishing campaigns, primarily targeting major US law firms.