Cyber Risks · Krebs on Security

Fraud Bazaar Carders.cc Hacked

Summary: Carders.cc, a German forum for trading stolen financial data, was itself hacked, and at least three files were traded on Rapidshare.com, including a database of communications among nearly 5,000 members, a file of user names, e-mail addresses and often passwords, and a file of users' sign-up Internet addresses. The anonymous authors, publishing under the name Owned and Exposed, said the operators had set insecure filesystem permissions on the Web server, chmod and chown nearly everything to 777 and www-user readable including the /root directory, turning a minor break-in into a total database compromise.

What's compelling: The leaked database carries password and banking information for many innocent victims, and its public release could prompt the forum's members to abandon those accounts and Internet addresses and potentially jeopardize ongoing investigations.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related