ShinyHunters Offers Stolen Data on Dark WebShinyHunters Offers Stolen Data on Dark Web
The threat actor offers more than 26 million records from a series of data breaches.
July 28, 2020
Dave.com, a mobile banking company, announced on Friday that a hacker had exfiltrated data on more than 7.5 million users. While the company says that the hacker's point of entry has been closed, the data has since been offered — free to paid users — on a hacking forum.
The group or individual responsible for the attack is a data broker known as ShinyHunters. The threat actor has offered the Dave.com data in a dump that includes real names, phone numbers, emails, birth dates, and home addresses in cleartext along with encrypted or hashed versions of Social Security numbers and passwords.
In addition, ShinyHunters is now offering data from a number of breaches on the same forum. The additional breaches and the number of records involved include:
Vakina.com.br — 4.8 million records
Truefire.com — 600,000 records
Havenly.com — 1.3 million records
Drizly.com d — 2.4 million records
Proctoru.com — 444,000 records
Scentbird.com — 5.8 million records
Appen.com — 5.8 million (suffered breach in 2017)
Homechef.com — 8 million records
Chatbooks.com — 15 million records
In total, more than 26 million records are now being offered at rates of $1,500 to $2,500 for each database.
Register now for this year's fully virtual Black Hat USA, scheduled to take place August 1–6, and get more information about the event on the Black Hat website. Click for details on conference information and to register.
About the Author(s)
You May Also Like
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
What's In Your Cloud?Nov 30, 2023