#IPVANISH PHONE NUMBER UPDATE#
The list goes on… Update – 11:24 – Tuesday, 31 March 2020 (BST) Last month, another Elasticsearch database was exposed and leaked personal data of millions of Americans from a computer in China. In another incident, personal and tax records of 20 million Russians were also leaked online. In November last year, 4 terabytes of personal records were leaked online – All that without any password. The database was hosted on an Elasticsearch server as well. Just last month, an Israeli company leaked personal data of millions of Americans including their physical address. – No customer data was leaked in the incident. These records including login credentials from previous data breaches including Twitter, Tumblr, Adobe, Vk, LinkedIn, and Last.fm, etc. Earlier this month, a cyber security firm leaked 5 billion records it hosted on the Elasticsearch server.
#IPVANISH PHONE NUMBER DRIVERS#
In April last year, a local ride-hailing app in the country leaked sensitive data of 1 to 2 million drivers in plain-text format – The misconfigured database was hosted on a MongoDB server.Įlasticsearch and misconfigured databases:Įlasticsearch is an open-source search and analytics engine for all types of data and lately home to tons of misconfigured databases. Nevertheless, Iranians are not new to such data breaches. The data was stolen from Iranian ISP Daba and belonged to MTN Irancell users. In September 2016, received an email in which a hacker going by the online handle of “Leader” shared a trove of data containing personal records and phone numbers of 40 million Iranians. This data can be used to spread fake news, you could create large groups and spread disinformation, though I don’t believe that was the purpose of the scrape, the researcher explained.
However, before the attack, the database was downloaded several times and one of the downloaders is now selling it on a prominent hacking forum whose name won’t be revealed for privacy purposes.Īlthough it is unclear how many people have already bought the database, when asked if the database could have an impact with regards to the Coronavirus pandemic, the researcher said” The researcher also revealed that a few days ago, misconfigured databases on Elasticsearch servers were hit by a worm in which, among others, the particular database was deleted as well.
The data only contained information that is obtainable by scraping and nothing to do with internal messaging so I believe it is a scraping operation done by some company in Iran that would then sell it to 3rd parties. In a conversation with, a security researcher from Under The Breach who analyzed the sample data indicated that the database has been created with the help of scraping, a process in which data is extracted from other websites or servers. This helps Iranians use Telegram even when it is blocked due to online censorship in the country. It is noteworthy that Telegram is an open source app allowing anyone to create their own versions of it.
On the other hand, Telegram has also confirmed to the researchers that the database came from an unaffiliated app. However, now has learned that the data was scrapped from HotGram and Talagram, two Telegram alternatives used in Iran. Initially, it was established that the data was scrapped by Telegram since it included user account IDs, usernames, hashes, secret keys, and phone numbers. After analyzing, it was revealed that the database contained a treasure trove of data belonging to 42 million Iranian citizens.Īccording to a blog post by researchers, the database was originally uploaded by a group of Iranian hackers going by the online handle of “Samaneye Shekar” meaning “Hunting system” in English. What happened:Įarlier today, researchers at Comparitech identified a misconfigured database hosted on an Elasticsearch server. However, it has happened and an individual is selling personal details of 42 million Iranians on a prominent hacking forum. Iranians, unfortunately, have been hit hard by Coronavirus and the last thing they would like to have is getting their privacy breached.
0 kommentar(er)
