Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: e-commerce

Published a database, property of Ledger

A database of the company Ledger, which is dedicated to hardware cryptocurrency wallets, was published, on 20th of December, on the Raidforum, following unauthorised access.The security incident...

References:

twitter.com

ledger.com

es.ambcrypto.com

bleepingcomputer.com

xataka.com

Tags:

Vulnerabilities in the EMV protocol allow payments without PIN

The contactless payment protocol for EMV bank cards, named after its founders Europay, Mastercard and Visa, contains several security flaws that allow criminals to make payments without using the...

References:

emvrace.github.io

hackread.com

welivesecurity.com

europapress.es

xataka.com

Tags:

Data leakage in the e-commerce company Tokopedia

Tokopedia, an Indonesian technology company specializing in electronic commerce, has suffered data breach from several million user records. The cyberattacker responsible initially published the...

References:

hackread.com

zdnet.com

unaaldia.hispasec.com

Tags:

Massive credential reset in Wallapop after an unauthorized access

On November 1, Wallapop revoked the access credentials of its users after detecting unauthorized access to its shopping platform. The Spanish start-up has communicated the incident through its...

References:

twitter.com

elpais.com

computerhoy.com

elmundo.es

osi.es

genbeta.com

Tags:

e-commerce

Arrest of the biggest cyberscammer in the history of Spain

The Civil Guard, in the so-called LUPIN operation, has arrested the largest cyber-staffer in the history of Spain. The detainee, a young man of 23 who had a criminal group under his command to...

References:

interior.gob.es

elmundo.es

elotrolado.net

bitlifemedia.com

Tags:

Information leakage in OpenCart websites

Researcher Yonathan Klijnsma, of the cybersecurity firm RiskIQ, has discovered a large-scale operation perpetrated by Magecart Group 12 against OpenCart's online store management system.The way of...

References:

riskiq.com

securityaffairs.co

bleepingcomputer.com

cyware.com

Tags:

Massive information leakage in GearBest

Noam Rotem and his researcher team of VPNMentor have discovered a security breach in the GearBest e-commerce website. The failure was in a wrong configuration of the encryption of one of the...

References:

vpnmentor.com

techcrunch.com

redeszone.net

unaaldia.hispasec.com

Tags:

e-commerce

Information leakage

Vulnerability

VisionDirect suffers data leakage caused by MageCart script

VisionDirect, an online store that sells contact lenses, has reported that it suffered a data leak from November 3-8, 2018. As indicated in their announcement, only people who logged into the...

References:

visiondirect.co.uk

theregister.co.uk

bleepingcomputer.com

Tags:

e-commerce

Information leakage

Tool

Leaked info of 40.000 OnePlus users

OnePlus have suffer a leaked info of 40.000 user’s credits cards.Attacker’s identity are unknowns at the moment, OnePlus are working each together with local authorities are investigating to...

References:

forums.oneplus.net

xatakandroid.com

bbc.com

Tags:

Bithumb, the electronic currency trading platform has been hacked.

According to Yonhap New Agency, a South Korean news portal, the Bithumb electronic currency trading platform has been hacked. The news has echoed after the call made from the platform to the Korean...

References:

english.yonhapnews.co.kr

thehackernews.com

criptonoticias.com

bbc.com

xataka.com

computerhoy.com

Tags:

Cryptocurrency

e-commerce

Information leakage

Corporate access

Cybersecurity Highlights

Published a database, property of Ledger

Vulnerabilities in the EMV protocol allow payments without PIN

Data leakage in the e-commerce company Tokopedia

Massive credential reset in Wallapop after an unauthorized access

Arrest of the biggest cyberscammer in the history of Spain

Information leakage in OpenCart websites

Massive information leakage in GearBest

VisionDirect suffers data leakage caused by MageCart script

Leaked info of 40.000 OnePlus users

Bithumb, the electronic currency trading platform has been hacked.

Pages