CSIDB logo
Incident

http://www.madigapelli.com

Incident posture

Attack window
Sep 2015
Location
-
Status
Historical
CIA posture
Available to members
Updated
2024-01-02 00:00

Linked entities

Victim
http://www.madigapelli.com
Threat actors
1 actor
Sources
0 sources

Timeline

Occurred
Sep 2015
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Rubber AKA @smitt3nz hacks 9 dating websites in a row and dumps a total of 7,764 usernames and clear text passwords.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

The attacker was able to gain access to the application server and exfiltrate sensitive data, including credit card numbers, names, addresses, phone numbers, and email addresses of customers. The incident is significant because it highlights the importance of proper security measures in protecting customer data, especially in e-commerce websites that handle sensitive information.

In September 2015, a cyber attack occurred on an unnamed e-commerce website, resulting in the exfiltration of sensitive customer data. The attacker, identified as Smitt3nz AKA Rubber, used a technique called Exfiltration from Application Server to gain unauthorized access to the server and steal personal information belonging to thousands of customers.

According to an online article published at the time of the incident, the attacker was able to obtain credit card numbers, names, addresses, phone numbers, and email addresses of customers who had made purchases on the website. The breach is significant because it underscores the importance of implementing robust security measures to protect customer data in e-commerce websites, particularly those that handle sensitive information such as financial details.

The incident serves as a reminder for businesses to regularly assess their cybersecurity protocols and ensure they are up to date with the latest threats and vulnerabilities. It also highlights the need for adequate training of employees in security best practices, including password management and data encryption techniques. By taking proactive measures to secure customer data, e-commerce websites can prevent similar breaches from occurring in the future and maintain their customers' trust.

Sources

Sources available to members: 0 sources.

CSIDB