A Pakistani cybersecurity company has come across data of 115 million Pakistani mobile phone users currently for sale on the dark web, a private media outlet reported.
The asking price for this data is 300 Bitcoins (BTC), which is equivalent to 2.1 million USD. Cybercriminals is the company who is selling data, they’re also VIP members of the platform.
Rewterz’s — Pakistani information security company — Threat Intelligence team has analyzed some of the samples from the telecom database up for sale on the notorious dark web. The data includes personal information of the users such as names, contact numbers, residential addresses, CNIC numbers, and NTN numbers.
According to the report, these threat actors are financially motivated, who’re working in Pakistan. Moreover, organizations with outdated
cyberinfrastructure are more vulnerable to these threats.
The team further notes that it is unclear for now whether only single or more telecom companies have fallen victim to cybercriminals.
According to the given sample’s visible results, the latest data is from 2014 and none of the latest number schemes (0317, 0308 etc) is mentioned.
As yet, none of the telecom operators has notified their customers that their data has been compromised.