Cyber Risks · Krebs on Security

Expert: Fake eBay Customer List is Bitcoin Bait

Summary: After eBay disclosed a breach affecting tens of millions of users, a Pastebin ad offered a supposed full eBay user database of 145,312,663 records for 1.453 bitcoins, with a sample dump of 12,663 Asia-Pacific users. Krebs tested five email addresses from that sample by registering new eBay accounts and succeeded on all five, and Deloitte threat researcher Allison Nixon repeated the test with identical results, indicating the list is fake.

Why it matters: Nixon said the likely target is a security company trying to verify the data, and Krebs reported that one security firm approached him about buying it before he talked them out of it - the buyer's money, not the data, is the product.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related