Hackers use stolen logins to fake major data breaches and extort companies
THREAT ACTORReliaQuestredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Attackers are abusing exposed credentials to access limited corporate data and presenting it as evidence of major breaches to pressure victims into paying. The article notes that authentic leaked records do not automatically prove an extensive network intrusion. The activity concerns external attackers affecting third parties rather than a compromise of ReliaQuest's environment.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether any of your staff or customer credentials appear in known leaks and reset them.
- Enable multi-factor authentication on accounts that access corporate data.
- Verify the scope of any breach claim against your own logs before responding to an extortion demand.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies