Bidding for Breaches, Redefining Targeted Attacks
Summary: A Krebs on Security report describes Enigma, a vetted cybercrime forum that operated openly on the Web until recently as a bid-and-ask marketplace where members posted requests for data or access to named corporate targets, including HSBC UK, Citibank, Air Berlin and Bank of America. Noam Jolles of Diskin Advanced Technologies, whose staff are former Shin Bet members, said the forum also carried bids for insiders, listing people who might be recruited or extorted, and that much of the demand was for spear-phishing services.
What's compelling: The forum turned targeted attacks into a priced, on-demand service, with buyers paying immediately and without haggling for verified stolen databases - a pattern Jolles attributes to a mass purchaser known as "The Samurai," believed by traders to be Chinese and government-linked.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026