Indian video on demand giant ZEE5 allegedly hacked by 'Korean hackers', customer info at risk

guest · Jun 6, 2020

ZEE5 allegedly hacked by 'Korean hackers', customer info at risk
June 6, 2020
https://www.bleepingcomputer.com/ne...cked-by-korean-hackers-customer-info-at-risk/

A hacker identifying themselves as "John Wick" and "Korean Hackers" claim to have breached the systems for Indian video on demand giant ZEE5 and are threatening to sell the database on criminal markets.
Hackers claim to have breached Zee5.com
Now, Kanishk Tagade of Quickcyber has reached out to us, revealing extensive details about a massive data breach that appears to has allegedly hit the video streaming giant.

In an email threat sent to Tagade, editors of major Indian newspapers, and employees of ZEE5, a hacker claiming to be "Korean Hackers" warned that they have breached Zee5.com and stolen a database with sensitive information.
They then threaten that they "will expose your database & code in public for open sale soon."
Click to expand...

Allegedly stolen data
When the hackers contacted Tagade, they stated that they downloaded 150GB of "private data" from Zee5.com, including the site's source code, and plan on selling it soon.

As part of the proof given to Tagade, they shared images of a repository on bitbucket.org containing the stolen information.
Was Dish TV compromised too?
One of the screenshots, shown below, also has "dish-tv" network drive on the list, which is noteworthy as Essel Group, who owns ZEE, also owns the satellite TV company, Dish TV.
Could this mean the hackers also had access to Dish TV customer information?
Click to expand...

ZEE5.com hacked: Hackers claim to have stolen data from the popular OTT platform

A person or a hacking group claiming to have gained access to the network of ZEE5.com, a popular Indian OTT platform, and stolen over 150GB of live data along with the source code of the site, Quickcyber has learned.

Update: Today (June 6, 2020), the hackers shared sample data of the hacked database of ZEE5 with us, along with the live code secret keys and credentials of the unsecured AWS (Amazon Web Services) bucket
Click to expand...

guest · Jun 7, 2020

No users' data compromised, investigating the matter: ZEE5
June 7, 2020
https://www.livemint.com/industry/m...stigating-the-matter-zee5-11591537728126.html

In a statement shared with IANS, Tushar Vohra, Head Technology, ZEE5 India said that they have noted some reports claiming about the data breach at ZEE5's end.

"We are investigating it further. We are also cognizant of the fact that the OTT sector has exploded in the past few years, so has hackers' interest in it. Especially post COVID-19 outbreak, data hacks have been on a steady rise. It is a shallow attempt to gain vested interests," Vohra explained.
According to the report, the hacker who appeared to be from a Korean hacking group is now planning to dump the data in the public domain for open sale.

Vohra said that all the sensitive information that can cause harm is solely rested with the top payment gateways that ZEE5 integrates and is fully secured.
Click to expand...

Log in or Sign up

Indian video on demand giant ZEE5 allegedly hacked by 'Korean hackers', customer info at risk

guest Guest

guest Guest

Log in or Sign up

Indian video on demand giant ZEE5 allegedly hacked by 'Korean hackers', customer info at risk

guest Guest

guest Guest

Useful Searches