Do you all know anything about the 1.6 MB txt file that was uploaded in May and is circulating on the internet? Since it also contains many other website addresses, I suspect that it is a database of some browser account manager or 3rd party password manager that someone hacked, then some antizoo group bought it for money, copied all the accounts with the address "zooville.net" (at least 200 accounts) from it and uploaded it to the internet on various doxxing, tinyboard, etc. sites.
Based on the comments, most of the accounts already have new passwords or are banned, 99.9% of the data is trash and 0-10 comments lurker account. Beastforum is also listed in many accounts, so they probably bought a thousand year old file cheaply. This explains why many passwords didn't work for them.
There was another txt file in it, there were about 50 passwords obtained by thief links and brute force methods, this was also used in the case a few weeks ago, I couldn't find the txt of this one.
They managed to log in with some accounts, they proved with print screens that they were spamming.
The many members who created "die animal abusers" threads in DF and elsewhere while watching horse sex videos (months ago) were because they were stolen accounts. This explains everything why a porn watching account suddenly became an antizoo spam account.
I would take the security of the forum a little more seriously after this. Of course, this is not ZV's fault, because it was not the ZV server that was hacked, but one of the password managers and only weak passwords. However, further stricter measures are needed.
And it would be good if users finally understood not to use "someone80, motherfucker85" and the like as passwords, not to use the same one on 15 other websites and not to save the password with a browser. Especially not if it is an outdated browser or Android phone that is several years old. Do not generate passwords with your browser, because the generation algorithm can also be decrypted. All this data was stolen from there.
There were also few "seen" logs (which thread it was in), so it's likely they also used a keylogger that users activated by clicking on the thief's link.
The attacks were mostly promoted by accounts with Israeli meme avatars, similar to AZA. The style of speech in the comments is very similar to that used on Kiwifarm and etc.
Since there was no destruction on the forum in 5 months, only simple spam, it is clear that the passwords of admins and members with high number of comments could not be obtained.