A notable hacking forum, DumpForums, has claimed responsibility for a massive data breach targeting Dr.Web, a prominent Russian cybersecurity.
See also: Microsoft Patch Tuesday October 2024 fixes 118 vulnerabilities
Hackers claim to have stolen 10 terabytes of sensitive data from the company's infrastructure, which has seriously damaged Dr.Web's reputation as a leading security provider.
According to the statement of the hackers published on DumpForums, the breach of Dr.Web was meticulously planned and carried out over several days.
The attackers claim to have initially infiltrated Dr.Web's local network, compromising one server after another. This systematic approach reportedly allowed them to penetrate even the most secure parts of Dr.Web's infrastructure.
According to the claim, the hackers successfully breached data from many critical systems, such as:
- Corporate GitLab server containing internal developments and projects
- Corporate mail server
- Confluence, Redmine, Jenkins and Mantis systems used for development and task management
- RocketChat, a communication platform
- Various software management resources
See also: American Water shuts down online services after cyberattack
Perhaps most worryingly, the attackers claim to have accessed and uploaded customer databases to DumpForums, potentially exposing the sensitive information of users who trusted Dr.Web for their security.
The hackers claim that the total volume of data they infiltrated is around 10 terabytes. This huge amount of information allegedly went unnoticed by Dr.Web for a whole month, during which the company continued to operate normally and promote products .
As a precautionary measure, Dr.Web disconnected all resources from its network for verification purposes and temporarily suspended the distribution of virus database updates.
This alleged breach, if confirmed, would be a significant blow to Dr.Web and the cybersecurity industry as a whole. It highlights the vulnerability of even specialized security companies to sophisticated attacks and raises questions about the effectiveness of existing protection measures.
See also: Ukrainian admits he was behind Raccoon Stealer malware
Data theft, as in the case of Dr.Web by DumpForums, is a serious threat in our time, as technology evolves and personal information becomes increasingly vulnerable. Cases of this criminal act can include the theft of personal information, such as credit card numbers, passwords and other sensitive information. Protecting our data is of utmost importance, and the use of advanced security methods, such as encryption and strong systems, can help prevent such unwanted incidents. In addition, informing and raising awareness of users about modern threats is crucial to protecting against data theft.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
