20,000 accounts hacked at Dutch online mail-order pharmacy DocMorris (Jan. 2023)

guest · Jan 30, 2023

by guenni - January 30, 2023

Trouble for customers of the online mail-order pharmacy DocMorris. The mail-order company had already restricted payment options days ago due to invoice fraud and requires payment in advance. Now it is reported that 20,000 user accounts at DocMorris were hacked via a credential stuffing attack. DocMorris has blocked these accounts.
Click to expand...

DocMorris demands prepayment
As of January 25, 2023, German site apotheke-adhoc.de reported that the online mail-order pharmacy DocMorris had suddenly changed its payment methods and required payment in advance. So far there were numerous possibilities with DocMorris to settle orders in on-line Shop (Paypal, credit card Mastercard or Visa, Klarna, Paydirekt, cash payment or calculation). Now probably only payment methods are allowed, where the customer pays in advance, writes apotheke-adhoc.de.

The background was numerous fraud attempts, as a spokesperson for the company confirmed to Medium: "n recent weeks, there have been increased fraud attempts at many online stores, including DocMorris.
Click to expand...

20,000 accounts hacked via credential stuffing attack
It has now become known that there was probably a credential stuffing attack on the online accounts of the online mail-order pharmacy DocMorris. In the process, the attackers sample lists of access names and passwords for the online accounts, which are known from previous hacks and are traded on the darknet. If a customer uses such access data for several online accounts or uses weak passwords that appear in these lists, the attackers gain access to the account.

According to the above tweet, attackers succeeded in cracking 20,000 customer accounts at DocMorris in this way. German site heise reported here (referring to this German Spiegel article, paywall), But also at German site apotheke-adhoc.de there is this report on the credential stuffing attack on DocMorris.
Click to expand...

Log in or Sign up

20,000 accounts hacked at Dutch online mail-order pharmacy DocMorris (Jan. 2023)

guest Guest

Log in or Sign up

20,000 accounts hacked at Dutch online mail-order pharmacy DocMorris (Jan. 2023)

guest Guest

Useful Searches