Skip to content
OriginalSign in
Image: SOCRadar

SOCRadarAmeer Owda

Iran Hajj Organisation data leak exposes 168m records on dark web

Part of the Everest story · since 15 Jun

Quiet for 3 weekslast report 9 Oct2 articles2 outlets
15 Jun · SOCRadar first25 Aug18 Sep12 OctNowThis article1st of 2
  • Mon 15 Jun, 13:11 UTC. SOCRadar, first report. Iran Hajj Organisation data leak exposes 168m records on dark web. This article, 1st of 2.
  • Fri 9 Oct, 12:13 UTC. Infosecurity, its first report on the story. Ransomware attacks hit record high as groups turn to triple extortion.

The SOCRadar Dark Web Team reported several concerning developments concerning the sale of sensitive data. Key findings include:

1. **Iran's Hajj Organization Data**: A breach allegedly impacting 168 million records related to travel and personal details was listed for $80,000 in Bitcoin, posing risks of identity theft and financial fraud.

2. **Crypto User Leads for Sale**: A threat actor advertised extensive user data from platforms like Binance and Crypto.com, potentially facilitating phishing and impersonation attacks.

3. **APT43 Tool Claims**: A post claimed to offer backdoors and zero-day vulnerabilities linked to the North Korean group APT43, suggesting a high risk of system compromise if genuine.

4. **Swedish User Data from AdressFakta**: Over 5.4 million records purportedly from AdressFakta were offered for $3,800, which could enable social engineering schemes.

5. **Chrysler Breach Claim by Ransomware Group**: The Everest ransomware group claimed a breach involving 1TB of Salesforce-related data, risking targeted scams against affected customers.

How the story developed

All 2 articles
Quiet for 3 weekslast report 9 Oct2 articles2 outlets

2 articles from 2 outlets since 15 Jun. Quiet since 9 Oct. This was the first report.

Now15 Jun8 Oct111315171921242730First reportSOCRadar · 15 Jun, 13:11Picked up againafter 17 weeks quiet
  • Mon 15 Jun, 13:11 UTC. SOCRadar, first report. Iran Hajj Organisation data leak exposes 168m records on dark web. This article, 1st of 2.
  • Fri 9 Oct, 12:13 UTC. Infosecurity, its first report on the story. Ransomware attacks hit record high as groups turn to triple extortion.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 2 articles as a list
  1. Mon 15 JunDay 01
    1. Iran Hajj Organisation data leak exposes 168m records on dark web13:11 · SOCRadar · First report · This article, 1st of 2

  2. Quiet for 17 weeks

    Fri 9 OctDay 1161
    1. Ransomware attacks hit record high as groups turn to triple extortion12:13 · Infosecurity · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in