InfoSecBulletin Cybersecurity for mankind
Hacker drop massive WhatsApp user dataset to sell in popular breach forum. The dataset includes over 3TB of data; millions of phone numbers and logins to WhatsApp accounts for free.
Cybernews researchers confirmed that it contains multiple files listing phone numbers by location. Approximately 10 million Russian and 4 million Israeli phone numbers were exposed.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Researchers said, it may include more files in the dataset. However, these files were protected by a password. The dropped file includes WhatsApp account logins which may lead to account takeover.
Over 3TB of data leaked, but where is it coming from?
The Cybernews research team said, “Typically, the kind of data present in the forum post would be collected through social engineering attacks,”.
Additionally, Last year, University of Vienna and SBA Researcher discovered a WhatsApp vulnerability which enables the extraction of more than 100 million phone numbers per hour. Although WhatsApp chat is end to end encrypted but still it can be extracted, the research finds.
“The user clicks on a link or scans a malicious QR code, fills out their info, and the info gets sent to the attacker, plain and simple. Also, such data could be collected with infostealers.”
The legitimacy of the dataset are still be verified but if true, it may pose significant security risks to WhatsApp users.
The hacker is hanging up their keyboard
On the post note, the threat actor said, they’re quitting cybercrime. Generally cyber criminal post such data and demand ransom but the case is different.
“I also wanted to say goodbye, as this is my last message. As you may have noticed, my activity on these forums has decreased significantly lately, as I’ve decided to refocus on my personal life and true priorities,” the hacker wrote.
“I’ve greatly enjoyed the discussions and the time spent here, but it’s time for me to move on,” they added.
