Hacker claims access to Shanghai Covid app, threatens to sell data on
millions of users

Date:
Mon, 15 Aug 2022 14:13:44 +0000

Description:
A small sample was provided as proof, and some users confirmed the data was authentic

FULL STORY ======================================================================

A hacker claims to have breached Shanghais Covid app and stolen the personal user data found there

According to a Reuters report, a cybercriminal going by the name XJP took to the hacker forum Breach Forums, to advertise a database carrying sensitive information on 48.5 million users.

The database was taken from Suishenma, the Chinese name for Shanghais health code system, used by all residents and visitors of the city since early 2020. The hacker first asked for $4,850 for the database, but later toned the offer down to $4,000.

"This DB (database) contains everyone who lives in or visited Shanghai since Suishenma's adoption," the ad reads. Authentic samples

According to the report, the hacker posted a small sample, including data on 47 people, as proof of his claims. The sample contained the names, Chinese identification numbers, phones, and health code statuses of these people. The publication found 11 people confirming the authenticity of their information, although two did add that their identification numbers were wrong.

Suishenma has been mandatory for all residents (approximately 25 million people) and visitors of Shanghai, since early 2020. It collects travel data, and then color-codes users based on their chance of catching the virus. The users must then show the code whenever they enter public places. Read more

Mystery hacker claims to have conducted one of the largest data heists in

history

Hacked Shanghai police database didn't let users set a password

Keep your business safe with the best endpoint protection

Users access Suishenma via the Alipay app, Reuters further added, stating
that the city government manages the data coming into the app. At the moment, none of the affected parties were ready to comment.

Chinese authorities are faced with the second major data leak in two months, after a threat actor leaked what appears to be sensitive data on a billion Chinese. That database was also put up for sale on Breach Forums. Here's our rundown of the free and paid options for the best firewall software to stay protected online

Via: Reuters



======================================================================
Link to news story: https://www.techradar.com/news/hacker-claims-access-to-shanghai-covid-app-thre atens-to-sell-data-on-millions-of-users/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)