Commerce pirate : un cybercriminel vend des dizaines de téraoctets de données
A cybercriminal is offering a massive stock of personal and corporate data, spanning over 25 countries and multiple sensitive categories, for sale. The offering includes over 100,000 distinct datasets, encompassing phone numbers, email addresses, citizen information, passports, B2B relationships, and consumer data, with a total value exceeding $2.5 million. The seller is offering access via a subscription model using cryptocurrency, and claims to have data from major companies and a substantial volume of information – over 70 Terabytes – with a focus on countries including France, Germany, the US, Vietnam, China, Israel, and Russia. The ZATAZ report highlights that while the claimed volumes are impressive, verifying the actual data and its provenance is crucial, as the seller’s claims are largely based on promotional material.
A cybercriminal is offering a vast collection of personal and corporate data for sale, sparking concerns about potential misuse and data breaches. The announcement, discovered by ZATAZ’s threat intelligence team, details a market where data brokers accumulate and sell sensitive information. The offering includes over 100,000 distinct datasets, encompassing phone numbers, email addresses, citizen information, passports, B2B relationships, and consumer data, with a total value exceeding $2.5 million. The seller is offering access via a subscription model using cryptocurrency, with monthly rates starting at $199, three-month subscriptions at $399, and a permanent access option priced at $2,999.
ZATAZ has identified that the data is sourced from a wide range of countries, including France, Germany, the US, Vietnam, China, Israel, and Russia, and claims to include a significant amount of data from major companies. The seller’s claims are largely based on promotional material, and the actual data and its provenance are difficult to verify. The report emphasizes that the claimed volumes – over 70 Terabytes – are not independently verified and that the seller’s claims are based on promotional material.
The announcement highlights a market where the value is based on the accumulation of sensitive data, and cybersecurity analysts must carefully distinguish between promotional claims and verifiable data. The seller accepts payments using various cryptocurrencies, including Bitcoin, USDT, Solana, and Ether, without providing details on buyer verification or a contractual framework. The report notes discrepancies in the claimed data volumes, such as shifting from over 45 Terabytes to over 70 Terabytes, and the assertion of 100,000 private datasets.
ZATAZ’s investigation suggests that the seller’s operations are likely based in Asia, and the data is intended to be sold to various actors, including potentially criminal organizations operating in Russia and China, who may be wary of dealing with local data to avoid scrutiny from the FSB. The report underscores the importance of understanding the indicators provided by such announcements – targeting countries, data categories, claimed periods, payment methods, and pricing – to assess the potential threat landscape.