InfoSecBulletin Cybersecurity for mankind
After the ‘MOAB’ data breach exposing 26 billion records, a new leak has occurred. It includes 1.8 terabytes of data from an “Indian Mobile Network Consumer Database” with personal information of 750 million people. This database is now being sold on the dark web.
CloudSEK, a cybersecurity firm, revealed a huge data leak exposing the personal information of 750 million individuals. This could lead to unprecedented cyberattacks and identity theft. CloudSEK recommends that telecom service providers and the government validate the data and find the loophole. This information was shared by Sparsh Kulshrestha from CloudSEK.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
He added, “This breach underscores the critical need for organizations and individuals to prioritize cybersecurity measures and remain vigilant.”
A cybersecurity company discovered a large data breach when a person called ‘CyboDevil’ advertised the data on the dark web. The database contains sensitive information like names, phone numbers, addresses, and Aadhaar details. 85% of the data is about Indian users and it affects all major telecom providers, according to CloudSEK researchers.
“The data, available for sale, is compressed to 600GB and uncompressed to 1.8TB, posing significant risks to both individuals and organisations. The threat actor has demanded $3,000 for the entire dataset,” the researchers said.
This leak could lead to financial loss, stress, reputational damage, and more cyber attacks, the researchers said.
