Gnosticplayers, a hacker who already is for the most part
known for putting up for sale more than 840 million user records in the
previous month has yet again made an appearance and has returned with a fourth
round of hacked data that he's selling on a dark web marketplace.
Ever since February 11 the hacker has set available for
sale, data for 32 companies in three rounds on Dream Market, a dark web
marketplace. This time, Gnosticplayers is more focused on the information of
six companies, totalling 26.42 million user records, for which he's asking
1.2431 bitcoin which is approximately $4,940.
The difference between this Round 4 and the past three
rounds is that five of the six databases Gnosticplayers set available for sale
were gained amid hacks that have occurred a month ago, i.e. in February 2019.
What's more, it merits referencing that a large number of the companies whose
data Gnosticplayers has sold in the past three rounds have already affirmed
breaches.
The six new companies targeted this time are , namely game dev.
platform GameSalad, Brazilian book store Estante Virtual, online task manager
and scheduling applications Coubic and LifeBear, Indonesia e-commerce giant
Bukalapak, and Indonesian student career
site YouthManual.
"I got upset because I feel no one is learning,” the
hacker said in an online chat "I just felt upset at this particular
moment, because seeing this lack of security in 2019 is making me angry."
He says that he set up the data for sale essentially in
light of the fact that these companies had neglected to ensure their passwords
with solid encryption algorithms like bcrypt.
Albeit simply the last month the hacker said that he needed
to hack and put up for sale more than one billion records and after that retire
and vanish with the cash. But in a recent conversation, he says this is not his
objective any longer, as he discovered that various other hackers have already
just accomplished the similar objective before him.
Gnosticplayers likewise revealed that not every one of the
information he acquired from hacked companies had been put on sale. A few
companies surrendered to extortion demands and paid expenses so that the
breaches would stay private.