Hacker selling Vodafone’s Ho Mobile database of 2.5 million users

guest · Dec 29, 2020

Hacker allegedly selling Vodafone’s Ho Mobile database of 2.5M users
The database contains ICCID that can be used in SIM swapping attacks
December 29, 2020
https://securityreport.com/hacker-allegedly-selling-vodafones-ho-mobile-database-of-2-5m-users/

A threat actor has posted a thread on one of the dark web forums claiming to sell Ho Mobile’s database of 2,500,000 users, as observed by Security Report.
Ho Mobile is an Italian telecom carrier owned by Vodafone.

This week threat analyst Bank Security first shared details related to the post on Twitter, after which Security Report analyzed the data sample posted in the forum.
Click to expand...

While there is nothing confirming yet if this data is authentic and belongs to Ho Mobile, as observed by Security Report, the leaked data sample of 10 customers posted by threat actor LongPig includes: [...]
This information can be abused by threat actors in SIM swapping attacks to effectively take control of the phone number.

Consequently, attacks may be able to bypass SMS-based 2FA (two-factor authentication) security employed by banking websites, email, and security-centric online systems and potentially breach customer accounts on these websites.
Click to expand...

Vodafone or Ho Mobile have not yet confirmed if this data is authentic.
Security Report has reached out to Vodafone and Ho Mobile and we are awaiting a response.
Click to expand...

guest · Jan 5, 2021

Italian mobile operator offers to replace SIM cards after massive data breach
Hackers stole the personal data for 2.5 million Ho Mobile subscribers
January 5, 2021
https://www.zdnet.com/article/itali...-replace-sim-cards-after-massive-data-breach/

Ho Mobile, an Italian mobile operator, owned by Vodafone, has confirmed a massive data breach on Monday and is now taking the rare step of offering to replace the SIM cards of all affected customers.
The breach is believed to have impacted roughly 2.5 million customers.

It first came to light last month on December 28 when a security analyst spotted the telco's database being offered for sale on a dark web forum.
Click to expand...

While the company initially played down these initial reports, Ho confirmed the incident on Monday, in a message posted on its official website and via SMS messages sent to all impacted customers.

Ho's statement confirms the security researcher's assessment that hackers broke into Ho's servers and stole details on Ho customers, including full names, telephone numbers, social security numbers, email addresses, dates and places of birth, nationality, and home addresses.
FREE SIM CARD REPLACEMENTS
To avoid even the slightest threat of telephone fraud or SIM swapping attacks, the Italian telco is now offering to replace SIM cards for all impacted customers, if they wish, and free of any charges.

"You can go to one of our authorized dealers and request a SIM change free of charge, bringing your current SIM and a valid identity document with you," the company wrote on Monday.
Click to expand...

mood said: ↑

Hacker allegedly selling Vodafone’s Ho Mobile database of 2.5M users December 29, 2020
Click to expand...

Update 29-Dec-2020:
While calling the threat actor’s claims “rumors,” Ho Mobile has told us that they are currently investigating the case: [...]
Update 30-Dec-2020:
However, not everyone is convinced, as a supposed API that would return Ho Mobile users’ information seems to have existed since at least 2019. [...]
Update 4-Jan-2021:
After previously dismissing reports of the data breach as “rumours,” Ho Mobile has now admitted to the data breach in a notice issued today.
https://www.ho-mobile.it/comunicazione/
Thanks to Bank_Security for the initial tip off and for providing updates throughout this developing story.
Click to expand...

Log in or Sign up

Hacker selling Vodafone’s Ho Mobile database of 2.5 million users

guest Guest

guest Guest

Log in or Sign up

Hacker selling Vodafone’s Ho Mobile database of 2.5 million users

guest Guest

guest Guest

Useful Searches