LQDFX Customer Dataset Offered for Sale for $800
Overview
An actor using the handle "0x4ziz" is offering a dataset allegedly containing LQDFX customer information on an underground forum for $800, negotiable. The post describes LQDFX as an online brokerage focused primarily on forex trading, with access to other financial instruments. The actor claims the dataset includes customer email addresses, full names, amounts and countries.
The supplied screenshots show a Converge Gate-branded transactions interface with the account label "LQD Limited", transaction entries and an expanded customer record. The interface displays 96,320 transaction rows; this is not a confirmed count of affected customers or exported records. The dataset's authenticity, ownership, scope and acquisition method have not been independently verified.
Post details
What the post claims
- LQDFX customer dataset offered for sale
- Customer email addresses
- Customer full names
- Amounts, as described by the actor
- Customer countries
- $800 asking price, negotiable
Screenshots
IOCs & contact identifiers
Identifiers visible in the source material. Contact identifiers support correlation and do not, on their own, establish compromise.
| Type | Identifier | Source |
|---|---|---|
| Forum handle | 0x4ziz | Screenshot 1 |
| Telegram handle | @pouahaha | Screenshot 2 |
| Named organization domain | lqdfx[.]com | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. No Tox ID, Session ID, malware hash or attacker-controlled IP address is visible. Customer identifiers shown in the purported evidence are not included in this table. URLs to any data will always be blurred out, but are available to subscribers on the threat feed or ransomware feed.
Mapped techniques
No MITRE ATT&CK technique is assigned from these screenshots alone. The post advertises customer information for sale, but does not establish the initial-access vector, collection method or exfiltration mechanism. A screenshot of a transactions interface does not independently demonstrate access to the underlying system.
Potential impact
If authentic, the claimed combination of customer names, email addresses, amounts and countries could support targeted phishing, brokerage impersonation and social engineering. Transaction context could make fraudulent payment, account-verification or recovery messages more convincing. The screenshots do not establish exposure of passwords, payment-card details, identity documents or live account access.
Status Unverified
The actor's ownership claim and the authenticity, completeness and origin of the offered dataset remain unverified. The displayed total of 96,320 transaction rows does not establish the number of unique customers or records held by the actor. Visible entries include dates in February-April 2024; those dates do not establish when access or any alleged data extraction occurred. The actor also alleges misconduct by LQDFX and claims its website is shut down; neither assertion has been independently corroborated for this report.
