darkwebvc

Summary：Taiwan's largest telecommunications operator, ChungHwa Telecom, faces the risk of Account Takeover (ATO), with at least tens of thousands of users having been impacted.

ChungHwa Telecom, the largest telecommunications operator in Taiwan with its official website cht.com.tw, faces the risk of Account Takeover (ATO).

According to the detection by THUD TECHNOLOGY PTE. LTD. (darkweb.vc), tens of thousands of users have been impacted, potentially exposing them to risks such as privacy breaches, phone bill leaks, and fraud. When attackers successfully execute an ATO attack, they can gain access to the users' entire registration and private information stored on the cht.com.tw website. Furthermore, they can perform unauthorized operations within the scope of the account's permissions, such as making changes to service subscriptions, accessing call records, and even engaging in fraudulent activities. The impact on these users is significant.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The well-known e-commerce website of Japan, Qoo10.jp, faces the risk of Account Takeover (ATO), with at least several thousand users having been impacted

Qoo10.jp, the renowned e-commerce website in Japan, faces the risk of Account Takeover (ATO).

When attackers successfully execute an ATO attack, they can gain access to the user's complete registration details and private information stored on the Qoo10.jp website. Moreover, they can perform any actions within the scope of the account's permissions without authorization, such as making purchases, reviewing purchase histories, and accessing home addresses. According to the detection by THUD TECHNOLOGY PTE. LTD. (darkweb.vc), several thousand consumers are at risk of privacy breaches, exposure of purchase records, disclosure of home addresses, and other dangers.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The official tourism website of Dubai, visitdubai.com, faces the risk of Account Takeover (ATO), with nearly a thousand members having been impacted.

Visit Dubai, the official tourism and events information website of the Dubai Department of Tourism and Commerce Marketing, offers global travelers comprehensive information on Dubai's attractions, events, accommodations, dining options, and local culture. However, this website is at risk of Account Takeover (ATO).

When attackers successfully execute an ATO attack, they can gain access to the user's entire registration and private information stored on the visitdubai.com website. Furthermore, they can perform all operations within the scope of the account's permissions without authorization, such as making bookings for flights, hotels, and other services, as well as viewing all the booking history of the current user. According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), nearly a thousand members have been impacted.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The famous online betting and sports betting website, bet7k.com, faces the risk of Account Takeover (ATO), with at least tens of thousands of members having been impacted, which allows attackers to place bets on behalf of the users.

Bet7k.com, a famous online betting and sports betting website, offering a variety of betting options for various sporting events, online casino games, as well as related promotional activities and information. However, this website is at risk of Account Takeover (ATO).

When attackers successfully execute an ATO attack, they can gain access to the user's entire registration and private information stored on the bet7k.com website. Furthermore, they can perform all operations within the scope of the account's permissions without authorization, such as placing bets on behalf of the users. According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), at least tens of thousands of members have been impacted.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The famous virtual currency exchange, crypto.com, faces risks of Account Takeover (ATO), with at least 100,000 members have been impacted.

Crypto.com, a famous virtual currency exchange based in Singapore that offers numerous cryptocurrency services, is exposed to the risk of Account Takeover (ATO). Despite implementing a Two-Factor Authentication (2FA) security strategy, Crypto.com users may still be vulnerable to ATO attacks perpetrated by attackers who manage to circumvent the 2FA measures.

When attackers successfully execute an ATO attack, they can gain access to the user's entire registration and private information stored on the crypto.com website, and they can perform all operations within the scope of the account's permissions without authorization. According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), at least 100,000 members have been impacted.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：Cisco, a globally leading network solution provider, is confronted with the risk of Account Takeover (ATO) risks, at least one million members have been impacted. Attackers can conduct arbitrary operations on the affected accounts without authorization, including modifying account information and performing business operations.

Recently, Cisco, the globally leading network solutions provider, has been exposed to numerous security vulnerabilities, such as root Escalation vulnerabilities, the injection of malicious JavaScript by hackers in its store to steal credit cards and credentials, and NX-OS zero-day vulnerabilities. These security vulnerabilities pose significant security risks to Cisco.

Furthermore, according to detections by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), Cisco is also facing Account Takeover (ATO) risks, at least one million members have been impacted. Attackers can conduct arbitrary operations on the affected accounts without authorization, including modifying account information and performing business operations.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：Medibank, The largest health insurance company in Australia faces Account Takeover (ATO) risks, at least 3,400 members have been impacted.

Australia's largest health insurance company, Medibank, has announced that in response to the impact of the ransomware incident that occurred in 2022 (in December 2022, a 5GB copy of data was released on the dark web, claiming to be the entirety of stolen Medibank data which impacted 9.7 million users), it is expected to invest a total of AUD 126 million over the next three years to upgrade its IT systems.

Despite these efforts, according to detections by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), Medibank still has login credentials for over 3,400 accounts that have been compromised.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：A large number of users' private photos are stored in the online photo album. Once the hacker succeeds in the account takeover (ATO) attack, the personal privacy will be exposed.

This time we have selected five famous online photo album platforms on the Internet to detect the number of leaked login credentials.We use "Reach/1M" to represent the number of visits to the online photo album per million internet users, and "CredLeak×100" to represent the number of leaked login credentials of the online photo album (note that this number needs to be multiplied by 100).According to the following statistical graph, the larger the gap between the blue and orange diagrams, the lower the leakage ratio is, and vice versa.

It can be seen that among the five online photo album platforms, ( flickr.com, smugmug.com, imgur.com, pinterest.com, shutterfly.com ) imgur.com has a relatively low proportion of leaked login credentials, while shutterfly.com has a relatively high proportion of leaked login credentials.

However, it is worth noting that due to different security policies, the security of user accounts and the potential risk of account takeover (ATO) attacks cannot be generalized based solely on the proportion of leaked login credentials. The proportion of leaked login credentials is only one reference dimension for security.

Summary：At least hundreds of employees in the French Ministry of Justice (the department that arrested Telegram CEO Pavel Durov and issued his crimes) face the risk of account takeover (ATO).

For instance, administrators from the Ministry of Justice can log in to the Court Interpretation Service website to perform operational tasks.

It enables retrieval of the names, phone numbers, email addresses, addresses, and personal information of thousands of interpreters and translators.

Additionally, a substantial number of employees within the Ministry of Justice are at risk of having their personal privacy compromised due to the threat of Account Takeover (ATO), exposing not only basic personal information such as names, phone numbers, and addresses, but also more sensitive details like preferences and purchase histories.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The French government's public service website, https://www.service-public.fr, is facing the risk of account takeover (ATO), affecting at least over 50,000 French citizens.

Pavel Durov, the founder and CEO of Telegram, was arrested in France today and may face charges of terrorism, money laundering, and drug trafficking. As one of the world's greatest instant messaging software, Telegram serves over 1 billion users, yet its CEO has been arrested by the French government, which is an unacceptable incident. France, which advocates freedom of speech, is actually slapping itself in the face with such an action.

In order to serve its customers well, Telegram has kept the risk of account takeover (ATO) extremely low. However, the French government's public service website, which is intended to serve its citizens, has extremely poor security and is facing a very serious risk of ATO. The French government should first fulfill its obligation to serve its citizens before judging others.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The exchange platform phemex.com cannot be exploited by leaked login credentials, significantly reducing the risk of account takeover (ATO).

THUD TECHNOLOGY PTE. LTD. (darkweb.vc) conducted an exploitation test on the login credentials leak for the exchange platform phemex.com. When attackers attempt to log in, even if the login credentials are correct, the platform will trigger two-factor authentication methods such as Google Authenticator upon detecting abnormalities like device changes, ensuring the security of the account. Therefore, we have detected that even though there is a leak of login credentials for at least 40,000 accounts on phemex.com, attackers still face significant difficulties in leveraging these leaked credentials to conduct account takeover (ATO) attacks against phemex.com.

Despite this, We still recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：While the famous gaming website WeGame has suffered a leak of at least 100 accounts, there are no apparent risks of Account Takeover (ATO).

Despite this, We still recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The famous cyberspace search engine Shodan faces Account Takeover (ATO) risks, at least 40,000 members have been impacted.

According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), the famous cyberspace search engine and Attack Surface Management (ASM) system at https://shodan.io, is facing the risk of Account Takeover (ATO), at least 40,000 users may be impacted, enabling attackers to take control of the accounts of impacted users and gain their privileges.

Furthermore, according to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), it has been revealed that the majority of other famous cyberspace search engines have the same risk, with their product operators failing to implement effective safeguards against ATO risk.

We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.

Summary：The famous code hosting platform Github faces ATO risks, enabling attackers to bypass security mechanisms and gain full control over website accounts.

The famous code hosting platform Github at https://github.com is at risk of Account Takeover (ATO). According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), at least 3 million members have been impacted.

Github only requires users to undergo email verification upon detecting abnormal login attempts. However, for many email services with inadequate security mechanisms, attackers can easily obtain the verification codes and access privileges. This enables attackers to bypass security mechanisms and gain full control over the accounts of Github users affected by this risk.

The National Public Data has been leaked. This data, once sold by USDOD for USD 3.5 million, contains approximately 2.9 billion pieces of personal information from citizens of the United States, Canada, the United Kingdom, and other countries. Currently, the valid data is available for free on hacker forums through membership or credits. The data is divided into two versions: a 277GB version (cleaned, containing only names, SSNs, and addresses), and a 648GB version (original data, including not only names, SSNs, and addresses, but also detailed personal records of criminal and non-criminal information).

©2024  darkweb.vc

Summary：The majority of Myanmar government websites lack effective safeguards against Account Takeover (ATO) attacks, resulting in at least 30,000 enterprises and citizens being affected.

The majority of Myanmar government websites lack effective safeguards against Account Takeover (ATO) attacks, resulting in at least 30,000 enterprises and citizens being affected. This enables attackers to leverage leaked login credentials to carry out Account Takeover (ATO) attacks on enterprises' or citizens' accounts.

Summary：The famous hacker forum, Leakbase, faces Account Takeover (ATO) risks, at least 500 accounts have been impacted.

The famous hacker forum at https://leakbase.io is at risk of Account Takeover (ATO). According to the detection by THUD TECHNOLOGY PTE. LTD.(darkweb.vc), at least 500 accounts have been impacted, enabling attackers to directly log in, take control of the accounts, view registered email addresses, and use the credits on those accounts.

In contrast, the hacker forum https://exploit.in, due to its exemplary security strategies, has not been detected to be affected by ATO risks at this time.