DDW Weekly Highlights in November W4
2024.12.05
☑️ S2W DDW Weekly Highlights in November W4
🔍 Personal Data of 3 Million Hong Kong Citizens Leaked and Sold, Impacting 40% of the Population
• A post offering the personal data of Hong Kong citizens for sale was identified on the dark web hacking forum BreachForums.
• On November 27, a threat actor, 0xzy, claimed the leaked data includes personal details of approximately 3 million individuals, representing 40% of Hong Kong's total population of 7 million.
• Sample data released by the threat actor includes ID numbers, names, and addresses in both Chinese and English.
🔍 New Ransomware-Operated Data Leak Site Discovered: Victims in Japan, Taiwan, and Korea
• S2W analysts have uncovered a new data leak site suspected to be operated by a ransomware group.
• The dark web site, Argonauts Group, was recently created under the username Argonauts on the hacking forum Leakbase. Separate analyses of ransom notes suggest it is managed by the Argonauts Group ransomware operation.
• Thus far, the site has exposed data from over 10 victim organizations, including entities in Japan and Taiwan. Notably, leaked samples from a Japanese firm contain information related to Korea.
• The Argonauts Group is actively expanding its presence across the dark web, hacking forums, and Telegram.
🔍 Indonesian Police Hit by Data Breach: Personal Details and Chat Logs Leaked
• Internal documents of the Indonesian police have been leaked and are being circulated on the dark web hacking forum BreachForums.
• On November 26, a threat actor known as NAVINN24 disclosed that the leaked data includes personal information of police officers, consultation chat records, and legal discussions.
• The data, approximately 40MB in size, appears to have originated from sultra.polri.go.id, indicating a potential breach of the Indonesian regional police department.
If you want to read more, follow the newsletter as below and visit S2W Inc. website to contact us.
* The full report is available upon request and for XARVIS subscribers.
Attachments
Threat Intelligence Reports
2024 Threat Landscape Report
2024.12.04
Previous
Threat Intelligence Reports
Analysis of Windows Server Remote Desktop Licensing Service Vulnerability: CVE-2024-38077 (MadLicense)
2024.12.05
Next