This is where the forum enters dangerous territory. Members frequently share "combos"—lists of usernames and passwords obtained from data breaches (e.g., LinkedIn, Yahoo, or recent corporate hacks). These are used for credential stuffing attacks. Additionally, "dox" (personally identifiable information of specific individuals) may be traded, though most reputable sections ban outright doxing to avoid immediate legal shutdowns.
Nullforums does not exist in a vacuum. Its direct competitors include:
However, Nullforums retains a cult following because of its strict moderation against obvious malware (ironic, given the environment) and its long archival history.
A common defense posted on these forums is: "I am here for educational purposes only." While legitimate security researchers do lurk, the transactional nature of the marketplace destroys this defense. When you pay for a "bank log" using cryptocurrency, you are not a researcher; you are an accessory to theft.
As of 2025, the status of Nullforums is fluid. Search engine de-indexing (Google removes many of its pages) and aggressive domain seizure have made it harder to find. The community has partially migrated to Telegram groups, Discord servers, and Tor hidden services.
However, the brand "Nullforums" persists. Typing the keyword into a search engine will yield dozens of mirrors—but caution is advised. Most "official" links are phishing sites designed to steal your login credentials. The golden rule of the underground: If a site asks for your credit card to "verify age" or download a crack, it is a scam.