Hackers use stolen logins to fake major data breaches and extort companies
THREAT ACTORReliaQuestredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Threat actors are using exposed credentials to access limited corporate data and presenting authentic leaked records as proof of major breaches to extort victims. The reporting stresses that such records do not automatically indicate extensive network intrusion. The activity affects third parties and is not described as a compromise of ReliaQuest's environment. Defenders should audit exposed credentials, enforce credential rotation and MFA, and assess extortion claims against verified scope before paying or escalating.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether any of your staff or customer credentials appear in known leaks and reset them.
- Enable multi-factor authentication on accounts that access corporate data.
- Verify the scope of any breach claim against your own logs before responding to an extortion demand.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies