AD

Wednesday, 29 July 2015

Antivirus Maker Bitdefender Hacked, Customer Data Being Sold In Shady Black Market Deals

By: Travis Doering & Dan McPeake
'Im sniffing one of their major servers stealing logins' Hacker DedoxRansome


Recreation footage shows Bitdefender’s user data being posted online. 

Bitdefender, the critical darling in internet security, appears to have been hacked and is now embroiled in a dangerous extortion plot that’s putting its over 400 million customers at risk.

Friday July 24th 2015: A Hacker going by the handle DetoxRansome (DR) first attempted to blackmail the company via Twitter, writing “I want 15,000 us dollars or I leak your customer base”. This message was then followed by a tweet containing login credentials for two Bit Defender staff members’ accounts and another one belonging to a customer.













A twitter message shows DetoxRansome's blackmail attempt.

Saturday July 25th 2015: DetoxRansome made his second attempt to monetize Bitdefender’s freshly stolen data, as well as the exploit with which he procured it. DR posted a listing on a pastee page detailing the private sale of what he later described in an email as “access to all usernames and passwords persistently to their (Bitdefender) flagship products”. He posted a sample of some of what he had stolen which contained the plain text username and matching passwords for over 250 active Bitdefender accounts. Travis Doering and Bitdefender were able to confirm many of them as active accounts. In the body of the pastee post DR also listed the following message “This is a sample I have more, email for details of the hole (EMAIL REDACTED)” Those words then launched an online bidding war for the stolen credentials and details of the exploit used by DR.
















A screenshot provided by our source show's DetoxRansome's  price negotiations.


Tuesday July 28th 2015: As he describes in the emails provided by our source, DR began exploiting the usernames and passwords to breach many of Bit Defenders clients. “this has the potential of being huge as I’m able to sniff all customer usernames and passes gov mil pharm etc this is big as i was able to hack posworks.com.au by using this” DetoxRansome writes. In his attempt to impress the potential buyer, DR also sent screenshots of him accessing the enterprise security solutions page of many companies. DR claimed that “I can login to there full enterprise security solutions i have their logins to their shit not just customers“.

A screenshot sent by DetoxRansome shows he has acesss to BitDefenders' enterprise security solutions for POS Works.
















A screenshot sent by DetoxRansome shows he has acesss to BitDefenders' enterprise security solutions for another Bitdefender client.


Reached by Travis Doering late Monday evening, Bitdefenders Marius Buterchi confirmed the
hacking of accounts, and said the company was “Aware of the issue and have reset the passwords for the customers who’s credentials have been made public.” He added “They are actively investigating how these passwords were made public.”























Recreation footage shows Bitdefender’s user data being sniffed.


When asked how DetoxRansome was able to procure the usernames and passwords, he responded that “I’m sniffing one of their major servers stealing logins”

While DetoxRansome’s claim of having access to their network could not be confirmed, if it is indeed the case, then Bit Defenders current remedy to reset the passwords and credentials in the wild, will have little to no effect as long as DetoxRansome is able to maintain his presence inside Bitdefender’s network.

While changing your Bitdefender password may or may not have any effect at this point depending on whether DetoxRansome's claims are true. We do recommend that if you are in the habit of sharing the same password across multiple sites. You change the credentials on any other accounts that may share the same password as your Bitdefender login.


(other writers please reference our article if you write an article based off of it)


Definitions:


Bitdefender is an award-winning anti-virus and internet software security company for MAC, PC and mobile devices.

Sniffing short for packet sniffing allows individuals to capture data as it is transmitted over a network.

Pastee is a web application which allows its users to upload snippets of text, usually samples of source code.

Exploit is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability in order to cause unintended or unanticipated behavior in computer hardware or software, in many cases this behavior can be used for malicious purposes.

posworks.com.au is a point of sale, designed to reduce paperwork, track inventory and market to a business customers through one easy-to-use process.


89 comments:

  1. Thats about 100% right lol i knew the buyer wasnt real i assumed it was bitdefender

    i woke up late today to find a email from butdefender so i decided to be a sport and disclose it
    to them privately they offered me a position to pen test for them or some shit and than offered to pay me for finding the hole so in good faith i did not leak publicly what servers i hit nor the method if they dont pay me i may sue them as i have a lawyer and he says the emails attempt to establish a contractual agreement and they offer to pay for hole i believe ill win if i dont receive my bounty!!!!


    as i was nice enough not to leak these details and even told them how and what method i used and what i had hey there people too not bad actual my goal isnt for them to loose business its just to show the weakness of things they worked well to remedy and stopped me quickly props buttdefender nice recovery and thanks for being sports

    ReplyDelete
    Replies
    1. dumbass script kiddie

      Delete
    2. This comment has been removed by the author.

      Delete
  2. stupid arse... you surely need a lawyer.

    ReplyDelete
    Replies
    1. His lawyer will need a lawyer.

      Delete
  3. gmail tips

    Gmail is one of the most popular free email services currently provided by Google. Gmail support number of language interface and you can easily switch to display language of your choice. You can change display language of Gmail email account from your Gmail account settings.
    gmail sign in

    about gmail

    ReplyDelete

  4. Sign in to Gmail to access to all Gooogle services. Log in to your account or sign up to create a new account
    gmail sign in


    gmail log in

    what's gmail?

    ReplyDelete
  5. Thanks for the best blog.it was very useful for me.keep sharing such ideas in the future as well.this was actually what i was looking for,and i am glad to came here!
    earn to die

    tank trouble
    Hi! I’ve been reading your blog for a while
    now and finally got the courage to go ahead and give youu a shout out from Austin Texas! Just wanted to tell you keep up the fantastic work!my weblog:
    happy wheels
    earn to die game
    tank trouble game
    earn to die free hot

    ReplyDelete
  6. Thanks for the best blog.it was very useful for me.keep sharing such ideas in the future as well.this was actually what i was looking for,and i am glad to came here!
    age of war 5
    Hi! I’ve been reading your blog for a while
    now and finally got the courage to go ahead and give youu a shout out from Austin Texas! Just wanted to tell you keep up the fantastic work!my weblog:
    age of war 6
    age of war 4

    age of war 3

    game earn to die

    ReplyDelete
  7. Thanks for the best blog.it was very useful for me.keep sharing such ideas in the future as well.this was actually what i was looking for,and i am glad to came here!

    hotmail sign in Hotmail is an email account of Microsoft Corporation. Like Google’s Gmail, it is full of the features of a regular email.

    hotmail login Hotmail was previously a quite popular email service. It has the features and utilities similar to other email services, but users encountered many annoying issues, and even lost fees they had paid for this service.


    recover hotmail password Therefore, there are many users who have a registered Hotmail account but no longer wish to use it as they are unhappy with the service.

    sign in to Hotmail  At this time, some users sought to remove their Hotmail account, but has some difficulties as it is a complicated process.

    ReplyDelete
  8. Thanks for the best blog.it was very useful for me.keep sharing such idea
    s in the future as well.this was actually what i was looking for,and i
    am glad to came here
    you keep up the fantastic work!my weblog
    age of war
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels

    tank trouble 3

    ReplyDelete
  9. The third delight in the Learn to Fly course of action. This time, our penguin is tried to fly, and also make it to space! play learn to fly 3 here

    ReplyDelete
  10. Games online
    Thanks for the best blog.it was very useful for me.keep sharing such ideas in the future as well.this was actually what i was looking for,and i am glad to came here!
    Happy wheels
    Hi! I’ve been reading your blog for a while
    now and finally got the courage to go ahead and give youu a shout out from Austin Texas! Just wanted to tell you keep up the fantastic work!my weblog:
    Age of war 2
    Earn to die

    ReplyDelete
  11. Thanks for sharing. I hope it will be helpful for too many people that are searching for this topic.
    shooting games | dog games | fighting games | mickey mouse games

    ReplyDelete
  12. Earn to Die 2 is a mobile game developed by Toffee Games. It is available on the App Store, Google Play and the Amazon Appstore Earn to Die | Earn to Die 3.
    Play the fabolous earn to die game and complete all the levels.You can play all the seven parts of the game on our website, including Tank trouble 2 is one of the best tank battle games and arcade games as a whole. If you love arcade games or want to play online against friends or family Tank trouble | Tank trouble 3 | Tank trouble 4

    ReplyDelete
  13. Thanks for the best blog.it was very useful for me.keep sharing such ideas in the future as well.this was actually what i was looking for,and i am glad to came here!
    Tank trouble
    Hi! I’ve been reading your blog for a while
    now and finally got the courage to go ahead and give youu a shout out from Austin Texas! Just wanted to tell you keep up the fantastic work!my weblog:
    Earn to die

    Barron Games

    Subble shooter

    Tank trouble

    ReplyDelete
  14. Hello everyone, here are some useful guidelines for your reference about some essential issues today. Hope people take a

    moment. Thank you very much! I love you guys !!!!

    hotmail sign in Hotmail is an email account of Microsoft Corporation. Like

    Google’s Gmail, it is full of the features of a regular email.

    hotmail login Hotmail was previously a quite popular email service. It has

    the features and utilities similar to other email services, but users encountered many annoying issues, and even lost fees

    they had paid for this service.


    recover hotmail password Therefore, there are many users who have a registered

    Hotmail account but no longer wish to use it as they are unhappy with the service.

    sign in to Hotmail  At this time, some users sought to remove their Hotmail

    account, but has some difficulties as it is a complicated process.

    ReplyDelete
  15. You’re alone in a zombie infested desert. Your only means of defense is your truck. Kill zombies to earn money, and then use the money to buy upgrades for your truck to help you to go through all the obstacles and defend yourself. Earn bonus cash by coming up with creative and impressive ways to kill the zombies, as well as breaking down other obstacles and barriers in your path.
    Use the arrow keys for navigation
    earn to die game123

    earn to die5

    earn to die game vui

    earn to die23

    earn to die game play

    earn to die
    tank trouble
    age of war

    freetowerdefensegames

    ReplyDelete
  16. Great! Thanks for sharing the information. That is very helpful for increasing my knowledge in this fiel
    A good blog. Thanks for sharing the information. It is very useful for my future. keep sharing
    Signature:
    Red Ball | red ball 2 | Red Ball 3 | Red Ball 4 |

    ReplyDelete
  17. All the best blogs that is very useful for keeping me share the ideas
    of the future as well this is really what I was looking for, and I am
    very happy to come here. Thank you very much
    earn to die play
    earn to die
    earn to die 3
    Hi! I’ve been reading your blog for a while now and finally got the
    earn to die 4
    courage to go ahead and give youu a shout out from
    earn to die 6
    Austin Texas! Just wanted to tell
    earn to die 5
    you keep up the fantastic work!my weblog
    age of war
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels
    strike force heroes
    slither io
    slitherio
    good game empire

    ReplyDelete
  18. Let’s keep out sites for your child! click:
    brain games | puzzle games | tetris | happy wheels | agario | abcya | fnaf 4
    To play for free!

    ReplyDelete
  19. Great! Thanks for sharing the information. That is very helpful for increasing my knowledge in this fiel.A good blog Apple Shooter . Thanks for sharing the information. It is very useful for my future. Stickman Games keep sharing
    Signature: Stickman Games

    ReplyDelete
  20. This is very amazing to see such work over here. Slitherio | Agario | Happy Wheels | happy fathers day 2016 quotes Carry on the discussions over night.

    ReplyDelete
  21. The 2016 UEFA European Championship, ordinarily alluded to as watch euro 2016 live online UEFA Euro 2016 or just Euro 2016, will be the fifteenth European Championship for men's national football teams composed by UEFA. You may watch uefa euro live streaming, Euro 2016 Live Streaming, UEFA Euro 2016 Live Stream, Euro Qualifiers Here.


    ReplyDelete
  22. “I've been making a list of the things they don't teach you at school. They don't teach you how to love somebody. They don't teach you how to be famous. They don't teach you how to be rich or how to be poor. They don't teach you how to walk away from someone you don't love any longer. They don't teach you how to know what's going on in someone else's mind. They don't teach you what to say to someone who's dying. They don't teach you anything worth knowing.”
    ― Neil Gaiman, The Sandman, Vol. 9: The Kindly Ones
    mutant fighting cup 2 | manny pacquiao | stardew valley wiki | slither.io | powerpuff yourself | zumbi tsunami | fishdom | quotes about love | chinese food near me | snake game

    ReplyDelete
  23. Let’s keep out sites for your child! click:
    slither.io | wings.io | happy wheels | abcya | fnaf 4 | games for kids | racing games to play for free!

    ReplyDelete
  24. I really hope to see the same high-grade blog posts from you in the future aswell.
    vertix.io
    Dog Games
    Fighting Games
    Subway Surfers
    Mickey Mouse Games

    ReplyDelete
  25. Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.
    slither io | wings io | science kombat | tank trouble 4

    ReplyDelete
  26. Let’s keep out sites for your child! click:
    slither.io | wings.io | happy wheels | abcya | fnaf 4 | games for kids | racing games | pacman to play for free!

    ReplyDelete
  27. The war between humans, orcs and elves continues. Lead your race through a series of epic battles, using your crossbow to fend off foes and sending out units to destroy castles. Researching and upgrading wisely will be crucial to your success!
    age of war 3 | age of war 2 | unfair mario 2 | tank trouble 3 | tank trouble
    The game controls are shown just under . Movement mechanisms primarily include acceleration and tilting controls.
    cubefield | tank trouble | happy wheels | slitherio | gold mine

    ReplyDelete
  28. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    obat aborsi
    cara menggugurkan kandungan
    obat telat datang bulan
    obat penggugur kandungan
    obat aborsi

    ReplyDelete
  29. Thanks for sharing this quality information with us. I really enjoyed reading.
    slither io | wings io | science kombat | tank trouble 4

    ReplyDelete
  30. Welcomes to google terminal from Austin Texas! google snake
    Amazing insight you have on this, Happy wheels it's nice to find a website that details so much information about different artists... Age of war 2 This article always blew me... Earn to die For how many times I have read this.
    slither io Hi! I’ve been reading your blog for a while slitherio it's nice to find a website that details so much big farm

    ReplyDelete
  31. Good blog post. I want to thank you for interesting and helpful information and I like your point of view. Thank you!
    slither io | wings io | science kombat | tank trouble 4

    ReplyDelete
  32. The best space for your child to relax!: wingsio | slither io | ya

    ReplyDelete
  33. Want to watch the most important match of Euro Cup 2016, the big final live from your home,just check out Euro Cup Final Live Streaming

    ReplyDelete
  34. Pleasant line use and great picture this post. this post will be successfully a debt of gratitude is in order for sharing.
    The Merger of UCSF Medical Center and Stanford Health Services Case Solution

    ReplyDelete
  35. What a nice blog, it has very professional and creative content that i find really helpful. If every page that one opens has such great content, i would say that browsing could be the order of the day. History dissertation paper rewriting help offered by well trained experts that guarantee the best.

    https://goo.gl/GAAFa9 Pijat Panggilan Jakarta www.aniesmassage.blogspot.com Pijat Panggilan Jakarta - https://goo.gl/t0UNUZ Pijat Panggilan Bandung www.massage-di-bandung.blogspot.com Pijat Panggilan Bandung - http://goo.gl/qpcb6j

    ReplyDelete
  36. Thanks for the great post. I liked your writing style most. The game you like it? Stick rpg has lots of improvement from its original version. The design of the game had a breakthrough. In the first version, the scene is a small part of a city. I like play game as Papas Game, Free Games Online and unblocked games free

    ReplyDelete
  37. Some time we are searching for incredible stuff, here I found that decent work.
    C Programming Assignment Help

    ReplyDelete
  38. Get the dissertation writing service students look for these days with the prime focus being creating a well researched and lively content on any topic.
    Internal Combustion Engines Assignment Help

    ReplyDelete
  39. Run 2 thanks for your share, Games Entertainment is an indispensable thing in life. And we want to introduce to you a lot of fun to the game you can unleash yourself with the appeal that they bring. Thank you!
    run 2
    run 2
    run 2 game
    run 2 y8
    play run 2
    run 2

    ReplyDelete
  40. Hello is am Richa, i really like this blog and your ideas, but if you wanna fun and romance with a girl so visit here.
    Call Girls in Delhi

    ReplyDelete
  41. I got good ideas from this amazing blog. Just wanted to tell you keep up the fantastic work!my weblog:
    soi cau mien bac | soi cau mb | soi cau

    ReplyDelete
  42. Hotmail is also known as Outlook mail or an e-mail services provided by Microsoft that is probably popular after Google’s Gmail. With a Hotmail account, you can send and receive emails quickly and easily as well as login and use all Microsoft services.
    hotmail login
    sign in to hotmail
    recover hotmail password
    create hotmail account
    hotmail sign in
    On our site are a lot of new and exciting games. Sure you will feel comfortable and enjoy mixing with it.
    strike force heroes 4

    ReplyDelete
  43. http://russianindelhi.in
    http://russianbaby.in
    http://cuterussian.in
    http://sweetrussian.in
    http://viprussian.in
    http://kanica.in

    ReplyDelete
  44. Like all the other security applications available out there, this one is no different; it mainly wants to protect the computers of people from viruses and even spywares in their own homes.
    http://antivirussuport.com/avg-support-number

    ReplyDelete
  45. Complete framework Scan: You should run complete framework examine frequently as this aides in recognizing any contamination present in your framework furthermore discovers repetitive things lying in your framework with the goal that you can clean them.
    http://antivirussuport.com/norton/how-fix-norton-error-8506-421

    ReplyDelete
  46. This is the selected site free games and play great. Same goes for your play.
    gum mayhem
    tank trouble 2
    learn to fly 2
    can your pet 2
    happy wheels game

    ReplyDelete