BANKING PASSWORDS STOLEN FROM AUSTRALIANS ARE BEING TRADED ONLINE BY CYBERCRIMINALS

Summary from the TLDR InfoSec newsletter

Threat intelligence researchers from Australian firm Dvuln say that 31k passwords belonging to Australian customers of the Big Four banks are being shared on Telegram and dark web sites. The researchers stated that the passwords are coming directly from infostealers installed on victims' devices, not a vulnerability or breach from the banks. Dvuln has stated that these bank accounts can be used to transfer funds or for money laundering.