TLDR InfoSec · MISCELLANEOUS

HACKTIVIST SCRAPES OVER 500K STALKERWARE CUSTOMERS' PAYMENT RECORDS

techcrunch.com2 min read

Summary from the TLDR InfoSec newsletter

A hacktivist going by the name wikkid has scraped and released over 500K customer records from stalkerware services provided by a Ukrainian company called Struktura. The scraped data includes customer email addresses, which app or brand the customer paid for, how much they paid, the payment type, and the last four digits of credit card numbers. The hacktivist stated that they exploited a “trivial bug” in the service's website.