Taiwanese networking equipment manufacturer D-Linkconfirmed a data breachin which network information was stolen and put up for sale on BreachForums earlier this month.
The attacker claims to have stolen the source code for D-Link's D-View network management software, as well as millions of records containing personal customer and employee information. The company's CEO's details are also at risk.
The stolen data reportedly includes users.
The scammer provided samples of 45 stolen files with timestamps between 2012 and 2013.
See also: Education: Increased attacks through phishing and exploitation of vulnerabilities
“I have breached D-Link’s internal network in Taiwan, I have 3 million rows of customer information, as well as the source code in D-View that has been extracted from the system,” the attacker said.
“This includes information of MANY government officials in Taiwan, as well as the CEOs and employees of the company“.
Τα δεδομένα ήταν διαθέσιμα για αγορά στο φόρουμ από την 1η Οκτωβρίου, με τον hacker να απαιτεί 500 $.
Κλοπή δεδομένων από το σύστημα “test lab”
D-Link said the breach occurred because an employee fell victim to a phishing attack, allowing the attacker to gain access to the company's network.
Upon becoming aware of the attack, the company immediately shut down potentially affected servers and disabled all user accounts, except for two used during the investigation.
See also: Gmail: Strengthens defenses against phishing and malware from 2024
Essentially, D-Link admitted to the breach , clarifying that the attacker had access to a product registration system, within what it described as a “test lab environment.” This was running on an outdated D-View 6 system that reached “end of life” in 2015.
Contrary to the attacker's claim that he stole millions of data , D-Link said the compromised system contained about 700 records, with information for older accounts.
D-Link also suspects that the attacker wanted to create the illusion of a recent data theft, while it believes that most of its existing customers are unlikely to be affected by this incident.
Data breaches
A data breach is a security incident in which unauthorized individuals gain access to confidential information. This can range from personal data, such as names and social security numbers, to corporate data such as customer lists, manufacturing processes, or trade secrets.
See also: AI-generated phishing emails are increasingly difficult to detect
The consequences can be severe, leading to financial losses, reputational damage and potential legal repercussions. It highlights the importance of cybersecurity, such as firewalls, encryption and regular software updates, to protect sensitive information.
Unfortunately, we hear daily about new data breaches that affect even large companies, such as D-Link.
Source: www.bleepingcomputer.com
