The internet often becomes a marketplace that you don’t want to see sold. This time, a hacker has decided to sell the Microsoft 365 login credentials of hundreds of C-level executives from companies worldwide. According to ZDNet, which broke the news, the details are being sold on a forum named Exploit.in, which is used by hackers speaking in Russian.
Microsoft 365 credentials being sold to C-level executives
The attacker, whose handle has not been exposed yet, sells email and password combinations of Office 365 and Microsoft accounts that belong to high-level executives. These executives occupy top-level functions like CEO, COO, CFO, CMO, CTO, President, Vice President, Executive Assistant, Finance Manager, Director, Accountant, Financial Controller, Finance Director, and Accounts Payables. As you can see, those who get their hands on the email-password combination can access what happens inside these top-tier companies.
Well, the hacker is charging a good amount of money for this data. For instance, purchasing a pair of credentials from the hacker would cost someone $100 to $1500, depending on various factors such as the size of the company and the account holder’s role. The attacker has published several advertisements detailing this information, asking the customers to contact him via Direct Message.
A security expert from the community who purchased the credentials from the attacker confirmed the same validity. Out of the two credential pairs that the expert had bought, one was of the CEO of a US-based software company while the other one belonged to the CFO of a retail store chain based in the EU. It can be seen that the attack is one of the biggest violations of corporate privacy. While these two companies have been notified, others are still left in the dark.
The seller has not revealed how he gained access to these credentials but iterates that he holds hundreds of such critical credentials. These credentials would be sold out in no time, as they make the perfect budding material for cyber-crime gangs across the world. In most cases, gangs use such information to conduct scams known as CEO Scams, which siphons huge sums of money.
Via: ZDNet.
