Tue, 21-Oct-2025

LastPass data breach 2022: Several customers’ credentials compromised

lastpass data breach 2022

LastPass experienced a data breach twice, in August and November 2022. Hackers were able to access sensitive customer data stored on a cloud-based backup. The password management company advised its customers to change their passwords for the websites they use. LastPass does not know, store, or maintain user master passwords. The LastPass data breach experienced … Read more

Hacker releases biodata of over 40,000 Karachi residents

Hacker releases biodata of over 40,000 Karachi residents
  • A hacker exposed the private information of 42,064 Karachi residents via a shopping website.
  • This information consists of full names, contact information, residential addresses, invoice information, and more.
  • The sample data only includes information on one DHA Phase 2 client.

Breach of cybersecurity incidents are all too often worldwide.

In a recent incident, a hacker exposed the private information of 42,064 Karachi residents via a shopping website.

This information consists of full names, contact information, residential addresses, invoice information, and more.

On a deep web forum, this private information is available for sale.

Zaki Khalid, an intelligence analyst, tweeted the information. A screenshot of some of the stolen personal information is included with the hacker’s sale offer.

The example displays an internal copy of a business’s invoice information for a client. Naturally, it also displays the client’s name, home address, email address, contact information, and more.

To protect privacy, we have censored the image of any personal information. It is unknown which user group was targeted in this data theft, according to Khalid’s research.

The sample data only includes information on a single DHA Phase 2 client, however, it is very plausible that shops were also targeted in addition to customers.

Other targeted users, according to the researcher, are also based in Karachi’s “posh” neighborhoods.

Although the information is mainly useless, it does demonstrate the seriousness of personal data breaches.

The Securities and Exchange Commission of Pakistan (SECP) experienced a data leak last month that led to a power struggle between the chairman and the concerned commissioner.

Private information about CEOs of companies, including identity card numbers, email addresses, residential addresses, and more, was exposed.

What’s most worrying is that Mubashir Sadozai, chief of information security, was unaware of the intrusion.

It wasn’t discovered until a local newspaper sent questions to the regulator on July 27 to alert them to the problem.

 

[embedpost slug=”tiktok-denies-that-hackers-leaked-users-sensitive-data/”]

Read more

TikTok denies that hackers leaked users sensitive data

TikTok

A hacker has posted on a hacking site that claims to have obtained information on 2 billion users of TikTok and Wechat. The company has refuted all of the accusations, saying that the hackers’ source code is unrelated to its own code. Security experts have also denied that the hacked data contains any sensitive information. … Read more

WhatsApp can be hacked through a simple Call

WhatsApp

A new scam has surfaced that can take control of your WhatsApp account with just a phone call.Rahul Sasi, the CEO of cyber security firm CloudSEK, confirmed the news. According to him, victims of this WhatsApp exploit receive a phone call from an attacker who persuades them to dial “**67*10 digit number> or *405*10 digit … Read more

pNetwork, a decentralized finance system loses $12M due to a hack

PNetwork

PNetwork, a decentralized finance (DeFi) system that enables multiple blockchains to connect with each other, stated that it lost 277 bitcoins ($12 million) after an attacker found a bug in its code. As per the tweet of pNetwork, pBTC token on binance smart chain was targeted by the attacker bonds to other blockchains weren’t affected. … Read more

Poly network, hacker can become chief security adviser of our company

Poly network

Poly Network, a decentralized finance (DeFi) platform got hacked and faces a loss of $600 million, and now the company has offered the hacker the position of chief security adviser.

The company wrote: “To extend our thanks and encourage Mr. White Hat to continue contributing to security advancement in the blockchain world together with Poly Network, we cordially invite Mr. White Hat to be the Chief Security Advisor of Poly Network.”

DeFi platform stated that by this heist we are able to see gaps of several security vulnerabilities and now we are fixing them, adding that the repair won’t “take place overnight.”

The company said it “has no intention of holding Mr. White Hat legally responsible, as we are confident that Mr. White Hat will promptly return full control of the assets to Poly Network and its users.”

The company said it has offered a “$500,000 bug bounty” to the hacker “to use it at his own discretion for the cause of cybersecurity and supporting more projects and individuals.”

“While there were certain misunderstandings in the beginning due to poor communication channels, we now understand Mr. White Hat’s vision for Defi and the crypto world, which is in line with Poly Network’s ambitions from the very beginning — to provide interoperability for ledgers in Web 3.0,” the company said.

[embedpost slug=”poly-network-hacker-returns-4-7-million-to-unlock-frozen-tether-stash”]

Read more

Poly network, hacker returns $4.7 million to unlock frozen tether stash

Poly network

The decentralized finance (defi) project Poly Network was hacked for over $600 million in digital assets. The attack was the largest hack. The next day, the hacker started to return funds back to the Poly Network team, it received $4.7 million so far as the project’s official Twitter account said.

Following the hack on Poly Network, the team issued a letter to the hacker, requesting that the hacker begin talking with the project’s members. “Law enforcement in any country will regard this as a major crime and you will be pursued,” Poly Network’s letter told.

The hacker apparently sent messages to the Poly Network staff, emphasizing that the hack could have been of lower quality.

The project has seen $4.7 million returned, according to the official Poly Network Twitter account. “So far, we have received a total value of $4,772,297.675 assets returned by the hacker,” Poly Network said. The company also revealed the amount and kind of funds the hacker give back. The returned crypto assets contain, $2,654,946.051 (ETH address), $1,107,870.815 (BSC address) and $1,009,480.809 (Polygon address).

A security company called Slowmist claims that the hacker’s ID was exposed and they have access to the hacker’s email and IP address. The hacker was clever to leverage a comparatively unknown crypto exchange in Asia and they claimed to have a lot of data on the attacker.

Reports show a white hat hacker has been trying to talk with the Poly Network attacker. “We can offer you a security bounty when you return all the remaining assets. We will provide a secure address through email,” the white hat wrote.

He further wrote, “The decision made by DAO can’t change the fact that the assets are stolen from crypto believers. We want to offer a security bounty and we hope it will be remembered as the biggest white hat hack in history.”

In a message sent to team members, the hacker is “ready to return the funds”. The hacker told that the trial “failed to contact the Poly” and “I need a secured multisig wallet from you. It’s already a legend to win so much fortune. It will be an eternal legend to save the world. I made the decision, no more DAO.” The white hat hacker replied, “we are preparing a multi-sig address controlled by known Poly addresses.”

“Accept donations to ‘the hidden signer’ now. Encrypt your msg with his pubkey.” The hacker further said. After this statement, he returns back the amount of 1 million USDC tokens to Poly Network.

“You are moving things [in] the right direction. We received 1+M USDC on Polygon. Did you ask us to encrypt the receiving addresses with your BookKeeper public key?” the white hat hacker asked. The hacker then sent more funds back to the project’s team members. Next, the hacker would ask the team to donate to an address if they supported his decision. The hacker added:

Hacker asked “You are moving things [in] the right direction. We received 1+M USDC on Polygon. Did you ask us to encrypt the receiving addresses with your BookKeeper public key?” More funds were sent by the hacker to the Poly Network’s team members. Hacker further added that if the team members support his decision he would ask the team to provide an address.

“Encrypt your msg with his pubkey if you want to talk. Dumping sh**coins first… How about unlocking my USDT after returning enough USDC?” the white hat hacker said.

[embedpost slug=”poly-network-got-hacked-and-faces-a-loss-of-600-million”]

Read more

Poly network gets hacked and faces a loss of $600 million

Poly network

Poly Network is decentralized finance (DeFi) firm, which publicized that hackers were able to steal much more than $600 million costs of several cryptocurrencies managed on the Binance Smart Chain, Ethereum, and Polygon blockchains.

This could be one of the biggest cryptocurrency-related heists.

If the total of that $600 million in assets managed on those chains was in fact cooperated. Poly Network didn’t share data about how much was stolen, but it did share the types of cryptocurrency taken by the hackers, CoinDesk reported.

Among those on the list are, Wrapped Bitcoin (WBTC), Wrapped Ethereum (WETH), RenBTC, Dai, Uniswap (UNI), Shiba Inu (SHIB), FEI, and USD Coin (USDC).

Poly Network public a list of wallets related to the theft and advised “miners of affected blockchain and crypto exchanges” and also “token issuers” to “blacklist assets coming from” those addresses to avoid the stolen coins from being spent. At least some of those groups, such as Tether, have fulfilled that demand.

According to a study conducted by CipherTrace, Poly Network’s statement came just after Reuters informed that “losses from theft, hacks, and fraud” in the DeFi industry touched “a record $474 million from January to July”. Over the course of a single morning, this hack might have more than doubled those figures.

“HsakaTrades” stated that the hacker is tipping individuals who offer them beneficial info, and showed that many individuals are texting the hacker to toast them on the theft. But then some of those celebrations might have been sudden. Much of the reaction to this hack has played out on Twitter.

Blockchain Security Company called SlowMist claimed to have “tracked down the attacker’s ID” also “their email address, IP information, and device fingerprint”. It didn’t take much time before the hacker pressured them to return what they stole and then were pressed criminal charges for the theft.

[embedpost slug=”ethereum-co-founder-resigns-citing-security-concerns”]

Read more

Iranian hackers targeted Western universities: report

hackers

Government-backed Iranian hackers have targeted universities in Europe, the United States and Australia in recent months, consultancy PricewaterhouseCoopers has found, Dutch broadcaster NOS reported on Friday. According to the sources of Reuters, It is unclear whether the attempts to break into computer systems, including those of three Dutch universities, were successful. The hackers were attempting … Read more