A Pakistani cybersecurity company has found a data dump containing information from 115 million Pakistani mobile phone users currently on the Internet (Dark Web).
Cybercriminal, a VIP member of the dark web forum where the ad appeared, has set the price of this data dump to 300 bitcoins (BTC) or $ 2.1 million.
According to the ad description, the telecommunications database was hacked this week.
Rewterz's Threat Intelligence team analyzed some of the samples from the telecommunications database available for sale on the infamous dark internet. The data contains personal information about users such as names, contact numbers, residential addresses, CNIC numbers and NTN numbers.
The Threat Intelligence team found that financially motivated actors operate in Pakistan and organizations with outdated cybersecurity infrastructure have become a simple target for these actors.
The team also notes that it is still unclear whether only one or more telecommunications companies have been victims of cyber criminals. Also, one cannot say with certainty whether this data has been stolen over time due to a single or multiple violations.
Following the visible results of the given sample, the latest data for 2014 and none of the latest numbering schemes (0317, 0308, etc.) are reported. The data is very likely to be old and the claim is incorrect.
So far, none of the telecom operators have informed their customers that their data is compromised.
