Tuesday, February 18, 2025
Homecyber securityTruecaller Data Breach - 47.5 Million Indian Truecaller Records On Sale in...

Truecaller Data Breach – 47.5 Million Indian Truecaller Records On Sale in Dark Web

Published on

SIEM as a Service

Follow Us on Google News

Truecaller is used to identifying unknown callers and also provide options to red-flags spammers. The app was developed by True Software Scandinavia AB, a private company in Stockholm, Sweden.

Recently it was observed by Cyble’s researcher that unprotected Amazon S3 buckets contain data from major websites.

Truecaller Data Breach

Today it was identified that an anonymous individual selling 47.5 Million users personal data associated with caller ID app Truecaller on the dark web.

Cyble noted that data contains information categorized as a state, cities, telecom carriers, and personal data.

A dark web ad published states that 47.5 Million Indians Truecaller records are up for sales and it costs only $1000. The data found to be from 2019.

Ad in Darkweb

“We were also taken off by surprise with such a low price point (in our opinion)”, reads Cyble blog post.

Researchers able to validate the data, “As part of our preliminary analysis, we noticed that the information was quite well organized such by state, cities, and carrier.”

The threat actor has organized the data in the following way

Sample User Data

The data has “over 47.5 million records, and it includes interesting information such as Phone Number, Carrier, Name, Gender, City, Email, Facebook ID, and others.”

https://twitter.com/AuCyble/status/1265244143862927361

If you are a Truecaller you might have a thing to worry about as the personal information has been exposed. Threat actors may use personal details to launch sophisticated attacks targeting individuals.

“It’s easy for bad actors to compile multiple phone number databases and put a Truecaller stamp on it. By doing that, it lends some credibility to the data and makes it easier for them to sell. We urge the public and users not to fall prey to such bad actors whose primary motive is to swindle the people of their money,” said Truecaller spokesperson said.

In 2019, TrueCaller fixed a Flaw Let Hackers Access User Data, System and Location Information.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Highly Obfuscated .NET sectopRAT Mimic as Chrome Extension

SectopRAT, also known as Arechclient2, is a sophisticated Remote Access Trojan (RAT) developed using...

Threat Actors Trojanize Popular Games to Evade Security and Infect Systems

A sophisticated malware campaign was launched by cybercriminals, targeting users through trojanized versions of...

New Research Aims to Strengthen MITRE ATT&CK for Evolving Cyber Threats

A recent study by researchers from the National University of Singapore and NCS Cyber...

New LLM Vulnerability Exposes AI Models Like ChatGPT to Exploitation

A significant vulnerability has been identified in large language models (LLMs) such as ChatGPT,...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Highly Obfuscated .NET sectopRAT Mimic as Chrome Extension

SectopRAT, also known as Arechclient2, is a sophisticated Remote Access Trojan (RAT) developed using...

Threat Actors Trojanize Popular Games to Evade Security and Infect Systems

A sophisticated malware campaign was launched by cybercriminals, targeting users through trojanized versions of...

New Research Aims to Strengthen MITRE ATT&CK for Evolving Cyber Threats

A recent study by researchers from the National University of Singapore and NCS Cyber...