'ResumeLooters' Attackers Steal Millions of Career Records

Researchers from Group-IB uncovered the "ResumeLooters" campaign that, between November and December, used SQL injection (primarily via sqlmap) and XSS to steal databases containing 2,079,027 unique emails and other resume personal data from at least 65 job-recruitment and retail sites across APAC and other regions; attackers used publicly available pentesting tools, left logs on a malicious server (139.180.137.107), and put stolen data up for sale on Chinese-speaking Telegram channels.