Sunday, November 10, 2024
Homecyber securityTruecaller Data Breach - 47.5 Million Indian Truecaller Records On Sale in...

Truecaller Data Breach – 47.5 Million Indian Truecaller Records On Sale in Dark Web

Published on

Malware protection

Truecaller is used to identifying unknown callers and also provide options to red-flags spammers. The app was developed by True Software Scandinavia AB, a private company in Stockholm, Sweden.

Recently it was observed by Cyble’s researcher that unprotected Amazon S3 buckets contain data from major websites.

Truecaller Data Breach

Today it was identified that an anonymous individual selling 47.5 Million users personal data associated with caller ID app Truecaller on the dark web.

- Advertisement - SIEM as a Service

Cyble noted that data contains information categorized as a state, cities, telecom carriers, and personal data.

A dark web ad published states that 47.5 Million Indians Truecaller records are up for sales and it costs only $1000. The data found to be from 2019.

Ad in Darkweb

“We were also taken off by surprise with such a low price point (in our opinion)”, reads Cyble blog post.

Researchers able to validate the data, “As part of our preliminary analysis, we noticed that the information was quite well organized such by state, cities, and carrier.”

The threat actor has organized the data in the following way

Sample User Data

The data has “over 47.5 million records, and it includes interesting information such as Phone Number, Carrier, Name, Gender, City, Email, Facebook ID, and others.”

https://twitter.com/AuCyble/status/1265244143862927361

If you are a Truecaller you might have a thing to worry about as the personal information has been exposed. Threat actors may use personal details to launch sophisticated attacks targeting individuals.

“It’s easy for bad actors to compile multiple phone number databases and put a Truecaller stamp on it. By doing that, it lends some credibility to the data and makes it easier for them to sell. We urge the public and users not to fall prey to such bad actors whose primary motive is to swindle the people of their money,” said Truecaller spokesperson said.

In 2019, TrueCaller fixed a Flaw Let Hackers Access User Data, System and Location Information.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

CISA Warns of Critical Palo Alto Networks Vulnerability Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns organizations of a critical vulnerability...

Cisco Desk Phone Series Vulnerability Lets Remote Attacker Access Sensitive Information

A significant vulnerability (CVE-2024-20445) has been discovered in Cisco Desk Phone 9800 Series, IP...

Cisco Flaw Let Attackers Run Command as Root User

A critical vulnerability has been discovered in Cisco Unified Industrial Wireless Software, which affects...

Researchers Detailed Credential Abuse Cycle

The United States Department of Justice has unsealed an indictment against Anonymous Sudan, a...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

The threat actor known as IntelBroker, in collaboration with EnergyWeaponUser, has claimed responsibility for...

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...