logo

Crime gang targeted jobseekers across Asia, looted two million email addresses

ID: 39864e11-661b-501e-a9d4-5b982223f30b

STIX ID: report--39864e11-661b-501e-a9d4-5b982223f30b

Feed Name: The Register (Security)

Threat Score
70/100

Date Published: 2024-02-09

Date Updated: 2026-04-26

Author: Laura Dobberstein

...
...

Group-IB identified a criminal group nicknamed “ResumeLooters” that ran a 2023 campaign targeting job boards and e-commerce sites—primarily in APAC—using SQL injection and XSS to exfiltrate databases containing over two million email addresses and other PII; investigators found attacker infrastructure, logs, use of common pentest/exploitation tools, and links to Telegram accounts where stolen data was offered for sale.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.