logo

How 50% of telco Orange Spain’s traffic got hijacked — a weak password

ID: 90859cb7-71b3-52d1-8628-55179b46e386

STIX ID: report--90859cb7-71b3-52d1-8628-55179b46e386

Feed Name: DoublePulsar

Threat Score
70/100

Date Published: 2024-01-03

Date Updated: 2026-04-19

Author: Kevin Beaumont

...
...

The report describes infostealer marketplaces selling thousands of RIPE NCC account credentials, which has allowed attackers to disrupt network operators (illustrated by an incident at Orange Spain); RIPE is investigating and there are calls to mandate two-step verification to prevent further misuse.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.