Forest Global Training Partners

Cyber Risks · Krebs on Security

Hackers Sell Access to Bait-and-Switch Empire

Summary: A cybercriminal posted a Dark Web auction for access to an administrative panel of a "US Search center" claimed to hold some four million customer records, including names, email addresses, passwords and phone numbers, with a starting bid of $800. KrebsOnSecurity traced the affected data-search sites to Penguin Marketing and Terra Marketing Group, both owned by Jesse Willms, whom The Atlantic reported was sued by the FTC for allegedly defrauding consumers of some $467 million between 2007 and 2011 through "risk free" trials that turned into recurring charges.

Key Takeaway: A Terra Marketing developer told Krebs the customer count was probably closer to a half million, not four million, and that the panel did not hold credit card data - but cleartext passwords for those customers are now being sold to the highest bidder, and Krebs notes they are likely to face credential stuffing and phishing as a result.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related