Hackers use stolen logins to fake major data breaches and extort companies
THREAT ACTORReliaQuestredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Criminals are using stolen login details to get into small amounts of company data. They then claim this proves a large breach, hoping the company will pay them to stay quiet. Real leaked records do not always mean that an attacker has taken over the whole network.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether any of your staff or customer credentials appear in known leaks and reset them.
- Enable multi-factor authentication on accounts that access corporate data.
- Verify the scope of any breach claim against your own logs before responding to an extortion demand.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies