Hacker(s) leak 6GB of private account data of German politicians and celebrities
4 January 2018 – One or more hackers have leaked massive amounts of information containing private and personal data of German politicians and celebrities. The data was leaked in ‘advent calendar style’: the hacker(s) released a certain amount of data each day until Christmas on their Twitter account. An initial review by our analysts provided insights into this large-scale doxing campaign.
Based on the available information and our analyses, it is assumed that the hacker(s) abused the reset-password feature for social media sites, using earlier credential leaks to gain access to mailboxes of politicians, YouTubers and other known Germans. It is likely that the hacker(s) used “download all your data”-features that have recently been introduced on sites like Facebook, Apple iCloud and Google due to the new GDPR privacy laws. Using such features, it becomes very easy to obtain all available data of a person at once.
The hacker(s) has/have released a total of six GB of data. It was released in smaller chunks each day, starting on 1 December 2018. The finale of this data advent calendar was released on 24 December, with the personal information of many German politicians.
The leaked data contains information such as private addresses, phone numbers, contact lists, photos, videos, pictures of children, scans of identity documents, internal documents of political parties, email, message and chat conversations, and more. Some of the data is as recent as September 2018. Other files go back to at least 2011.
Even though hacks are never fully preventable, it is highly recommended to regularly change passwords, especially on your email accounts, and enabling the two-factor-authentication function.
On 12 and 13 February 2019, Cybersprint will be present at the ‘StrategieTage IT Security’ congress in Cologne, Germany. The congress features presentations, prearranged meetings, workshops, and the opportunity to network with over 150 potential business partners in IT Security.read more
The Ukrainian police have arrested two groups of hackers who carried out DDoS attacks against news agencies and stole money from Ukrainian citizens.read more
Starting 1 February 2019, DNS will be updated, possibly affecting certain domains and IP-addresses. Is your domain ready? Check it here.read more
Do you have a question?