InfoSecBulletin Cybersecurity for mankind
Hacker drop massive WhatsApp user dataset to sell in popular breach forum. The dataset includes over 3TB of data; millions of phone numbers and logins to WhatsApp accounts for free.
Cybernews researchers confirmed that it contains multiple files listing phone numbers by location. Approximately 10 million Russian and 4 million Israeli phone numbers were exposed.
Crack 85 Accounts and Steal 2,500+ Records
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
270+ Zimbra servers compromised in continuous attacks
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
Researchers said, it may include more files in the dataset. However, these files were protected by a password. The dropped file includes WhatsApp account logins which may lead to account takeover.
Over 3TB of data leaked, but where is it coming from?
The Cybernews research team said, “Typically, the kind of data present in the forum post would be collected through social engineering attacks,”.
Additionally, Last year, University of Vienna and SBA Researcher discovered a WhatsApp vulnerability which enables the extraction of more than 100 million phone numbers per hour. Although WhatsApp chat is end to end encrypted but still it can be extracted, the research finds.
“The user clicks on a link or scans a malicious QR code, fills out their info, and the info gets sent to the attacker, plain and simple. Also, such data could be collected with infostealers.”
The legitimacy of the dataset are still be verified but if true, it may pose significant security risks to WhatsApp users.
The hacker is hanging up their keyboard
On the post note, the threat actor said, they’re quitting cybercrime. Generally cyber criminal post such data and demand ransom but the case is different.
“I also wanted to say goodbye, as this is my last message. As you may have noticed, my activity on these forums has decreased significantly lately, as I’ve decided to refocus on my personal life and true priorities,” the hacker wrote.
“I’ve greatly enjoyed the discussions and the time spent here, but it’s time for me to move on,” they added.
