On a popular hacking forum, and marketplace recently data for almost 7 million Robinhood customers was stolen and sold. In this event, the threat actors have abused the network of Robinhood by hacking one of its employees.
The hacker got access to the information of approximately 7 million Robinhood users through the customer support systems of Robinhood, all thanks to the hacked accounts of employees.
Types of data that has been compromised by the hacker are mentioned below:-
In this incident, for not releasing the compromised data, the hacker tried to extort the company. While among threat actors these types of data are particularly popular since they use these data for performing other cyberattacks like phishing attacks.
A threat actor named ‘pompompurin’ has proclaimed that on a popular hacking forum they were selling the data that they have stolen, and pompompurin announced this just after the two days when Robinhood disclosed the attack.
For at least five figures, which is about $10,000 or higher than this, pompompurin was selling the stolen data of the 7 million Robinhood customers, and this statement is stated by the pompompurin itself.
When performing Know Your Customer (KYC) requirements a secure file transfer service known as SendSafely is used by the trading platform, and here the hacker downloaded ID cards from SendSafely.
On the matter of safety, Robinhood Chief Security Officer Caleb Sima stated:-
“As a Safety First company, we owe it to our customers to be transparent and act with integrity. Following a diligent review, putting the entire Robinhood community on notice of this incident now is the right thing to do.”
To keep your account secure Robinhood recommended visiting:-
Moreover, they have also confirmed that in a security alert they never include any link to access your account.
Cybercriminals are increasingly exploiting search engine optimization (SEO) techniques and paid advertisements to manipulate search…
Cybersecurity experts have unearthed an intricate cyber campaign that leverages deceptive websites posing as the…
Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains, posing…
Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty ransomware,…
The RansomHub ransomware group has emerged as a significant danger, targeting a wide array of…
Threat actors are increasingly using email bombing to bypass security protocols and facilitate further malicious…