April 18, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Alert – Grandstream and DrayTek Devices Exploited to Power New Hoaxcalls DDoS Botnet
April 9, 2020Rewterz Threat Alert – Large Email Extortion Campaign
April 10, 2020Rewterz Threat Alert – Grandstream and DrayTek Devices Exploited to Power New Hoaxcalls DDoS Botnet
April 9, 2020Rewterz Threat Alert – Large Email Extortion Campaign
April 10, 2020
Rewterz, a pioneer of specialized cybersecurity services in Pakistan, has discovered a data dump of 115 million Pakistani mobile users data that have shown up for sale on the dark web today. The cyber criminal behind this data breach is demanding 300 BTC ($2.1 million USD) for the data.
_
This indicates that financially motivated threat actors are active in Pakistan and organizations are becoming a victim of these cyber attacks.
_
Rewterz Threat Intelligence team has analyzed the samples of the data dump that has been released on a popular dark web forum. The stolen data includes users’ personal details, such as full name, complete address, their mobile numbers as well as their NIC number and Tax number.
_
_
The cyber criminal offering the data dump for sale is a VIP member of the dark web forum where the ad has been posted. “Database is fresh hacked this week. That data was still being updated as I took the data down. Beautifully organized in a csv with headers for your pleasure.” data sale ad states.
_
Rewterz Threat Intelligence experts believe that the scale of this breach raises questions about the data security and privacy of telecom companies. This data can be an outcome of multiple breaches or a single breach, it’s too early to say at the moment. It is also unclear if any specific telecom operator or all telecom operators in Pakistan fell a victim of this attack. Nonetheless, if a breach had happened it should have been disclosed for customer’s knowledge. It might be possible that these telecoms companies failed to disclose the breach because they aren’t aware of the hack or have intentionally opted not to reveal. It’s concerning for customers whose information has been published.
_
Rewterz Threat Intelligence team closely monitors deep & dark web forums, marketplaces & shops and will publish any additional information as soon as it becomes available.
_
Watch this space for updates on this.
