The Not-So-Secret Network Access Broker x999xx
Summary: Krebs on Security identified "x999xx," a Russian access broker who sold hacked network credentials and stolen databases on the Exploit forum, as Maxim Kirtsov of Ozersk, Russia, who acknowledged the identity by email. The reporting ties his handles to accounts dating to 2005, sales including administrative access to a U.S. healthcare provider in October 2022 and 80 databases from Australia's largest retailer in June 2023, and a domain he listed as his occupation that Recorded Future found hosting a malicious Cobalt Strike server in 2019.
Why it matters: The broker behind access to a U.S. healthcare provider and an entire U.S. state's Social Security numbers, names and birthdays remains in Russia, where he told Krebs he has little to fear from domestic law enforcement so long as he targets foreign victims.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026