Dark Web: Over 15 million credentials from 100 000 data breaches.

According to Digital Shadows Photon Research a number of stolen user credentials increased by 300% comparing with 2018. Over 15 million account logins, including user names and passwords, were stolen from 100 000 data breaches. Approximately 5 million user credentials are unique.
Reported average price for one pair was a bit over $15, however some premium banking credentials were sold for much more. Anti-virus and security related credentials were sold for around $22. The most valuable pairs were admin's credentials which give cybercriminals access to the whole network. The full report can be found and analyzed.

LifeJournal: 26 million of records stolen in 2014 sold on the dark web.

Blogging platform LifeJournal did experience a data breach in 2014 but credentials appeared online this year.

According to different sources, the first hackers’ mention of the data availability started in the end of 2018. Another blogging platform, DreamWidth, forked previously from the LifeJournal, was also targeted via multiple credential stuffing attacks.

While LifeJournal never confirmed a breach, multiple resources had published some details found on the dark web. ZDNet with a help of threat intelligence firm Kela has confirmed the existence of the LifeJournal database online.

European Parliament Security Breach.

The European Parliament had a data breach with leak of the information about hundreds of officials.

The data breach was discovered in May 2020. More than 200 European Parliament, European Council and European Commission members’ credentials were leaked. More than 15000 users were affected as well, including staff, members of political parties and private institutions.

This is not the first attack that European Parliament is facing. In January 2019 the group Turla APT stole data from hundreds German politicians.

Parliamentary organizations are often a target for cybercriminals. To prevent these attacks more employees awareness trainings are required teaching them about phishing campaigns as well as additional security measures.

EasyJet Data Breach: 9 million Customers Affected.

UK’s largest airline EasyJet revealed the details of data breach with 9 million travel records accessed.

The company said on Tuesday that email addresses were taken and more than 2 000 customers credit card details stolen during the “Highly sophisticated” cyber-attack. According to EasyJet passport data was not affected.

The British budget airline said that customers whose credit card information was stolen have been contacted, other affected customers will be contacted in the next few days.

Gaming Industry Under Attack.

Gaming business was always targeted by cybercriminals. Recent attack on Nintendo (I did write a post about it earlier) and similar organizations proved that this industry will be always interesting for different groups of attackers.

Let me remind you about some recent attacks:

1.     Nintendo: April 2020, leak of more than 160 000 user credentials

2.     Valve Corporation: April 2020, leak of the “Counter-Strike: Global Offensive” source code

3.     “Valorant”: April 2020, beta version of the video game was exploited with ability to have free game-key generator

4.     EA Sport: April 2020, DDoS attacks on the platform

5.     Fortnite hosting servers (Valve Corporation): October 2019, Gafgyt botnet attacks.

To avoid being attacked create complex passwords, use MFA (multi-factor authentication) and don’t provide a credit card information inside the games. Be aware, be prepared!

Microsoft’s GitHub Account was hacked.

Yesterday a hacker did contact BleepingComputer to inform that he had hacked into Microsoft’s private GitHub account and stole more than 500 GB of data. Attacker mentioned that he wanted to sell it but decided to leak it for free.

According the timestamps a breach happened around March 28^th, 2020.

Different cyber intelligence researches said that data leaked is mostly not critical for Microsoft. From another side, Microsoft said that based on the internal “rule” “GitHub repos must be public within 30 days.”

#Microsoft #hacker #GitHub #data #cybersecurity

More than 15 million Tocopedia records for sale on the Dark Web.

Asian largest e-commerce store is facing the major data breach after researchers found more than 15 million user records on the dark web.

According to findings, cybercriminal sales the database with emails, password hashes, names, dates of birth and much more information.

Recently the same attacker found to be selling more than 91 million records for only $5000.

Tokopedia has raised a total of $2.4 billion in funding. The website is similar to Amazon, allowing users to buy products from the site or set up stores and sell products themselves.

As for now Tocopedia advised users to reset their account passwords.