COVID-19 data put for sale on the Dark Web

guest · Aug 31, 2022

August 29, 2022

Resecurity, a California-based cybersecurity company protecting Fortune 500, has identified leaked PII stolen from Thailand’s Department of Medical Sciences containing information about citizens with COVID-19 symptoms. The incident was uncovered and shared with Thai CERT.

The data was put for sale on several Dark Web marketplaces and was available for further purchase via a Telegram channel created by the bad actors.
Click to expand...

Based on the acquired samples and additional insights related to the security incident, the bad actors were able to gain unauthorized access to the government portal allowing them to manage users and records illegally.

The access was possible due to an active SQL injection vulnerability in an authorization module of the Web app used for online-surveys.
Click to expand...

At the time of breach identification, the bad actors could have accessed at least 5,151 detailed records with potential exposure of 15,000 in total.
Click to expand...

Resecurity: COVID-19 Data Put For Sale In Dark Web

Cybercriminals have stolen PII data from Thailand’s Department of Medical Sciences, the data contains information about patients with COVID-19 symptoms. The data was put for sale on several Dark Web marketplaces and is available for further purchase via a Telegram channel created by the bad actors.

The access was possible due to an active SQL-injection vulnerability in an authorization module of the WEB-app. According to OWASP Top 10 classification such vulnerabilities are extremely common issue exploited by hackers due to insecure parameters filtering, such vulnerabilities may lead to a significant risk of data breach. The Resecurity team has addressed the proper recommendations to contain vulnerability.
Click to expand...

Log in or Sign up

COVID-19 data put for sale on the Dark Web

guest Guest

Log in or Sign up

COVID-19 data put for sale on the Dark Web

guest Guest

Useful Searches