Tag: 2022
-
Hackers Out for Dating: NoStrings Data Breach
On January 21, 2022 Australian dating website, NoStrings(nostrings.com.au), has been attacked by hackers, resulting in a full user data breach. Kaduu Team has analysed the database and we are indeed surprised by the amount and variety of sensitive data the service has gathered. Among emails and hashed passwords the following data has been exposed: `id`,…
-
167 Million Users Exposed in Gravatar Breach
Gravatar is a popular service for providing globally unique avatars. Key idea behind the product is to enable association of a digital avatar with the email of an account holder. Because Gravatar integrates with WordPress, GitHub and other platforms, the avatar is automatically displayed whenever user interacts on a website of interest or leaves a…
-
“The Infraud Organisation” Hacking Group Arrested
On January 22, 2022 the leaders of the hacker group The Infraud Organization have been arrested by the Russian officials. Extradition of the cyber criminals was sought by the U.S. intelligence services for long time. The main way the hackers made money was by stealing credit card data and using them. The search for the…
-
Thales Group Falls Victim to Ransomware
Thales Group is a French multinational company that designs and builds electrical systems and provides services for the aerospace, defence, transportation and security markets. On January 17, 2022 LockBit 2.0 Ransomware operator’s website stated that files belonging to thalesgroup.com encrypted and published. LockBit, as well as other well-known cyber criminals behind ransomware, are attacking big…
-
BTC-Alpha.com Data Leaked
Operators of the “LockBit” ransomware virus posted data of the “BTC-Alpha” cryptocurrency exchange (btc-alpha.com) online. Among the published data are dumps of the exchange platform’s database. There are 362,479 rows in the table of registered users: hashed password, email address, registration date, country, IP address. In addition, separate tables contain KYC data: full names, addresses,…
-
REvil taken down by special FSB operation
On January 15, 2022 FSB reported a successful operation on seizure of infamous ransomware gang behind REvil. We consider it to be a big win in cybersecurity world. REvil was a Russia-based private ransomware-as-a-service (RaaS) operation. After an attack, REvil would threaten to publish victim’s information on their darknet page Happy Blog unless the ransom was received. In a high profile case,…
-
Aditya Birla Fashion and Retail Ltd. (ABFRL) Hacked, Data Leaked
Aditya Birla Fashion and Retail Ltd. (ABFRL) is a large conglomerate retail outlet with 3,212 retail stores throughout India and over 22,000 employees. It is a subsidiary of the Aditya Birla Group, which spans numerous sectors and has annual revenues of $45 Billion. On January 11, 2022 famous, due to previous loud cases, ShinyHunters hacking group…