Data sale on the darknet: Cisco investigates possible cyberattack
A well-known leaker claims to have internal Cisco data and now wants to sell it. The case is currently being investigated.
(Image: Black_Kira/Shutterstock.com)
API tokens, business documents and private keys: Cisco internals are for sale in the darknet, allegedly from a cyberattack
Much still unclear
The leaker IntelBroker is offering the data on BreachForums. In the past, he has already put data from other cyberattacks, such as on AMD, up for sale. The internal data is said to originate from an IT attack carried out by him and two other accomplices in June of this year. So far, the network supplier has not confirmed the incident, but is currently conducting an investigation, a spokesperson told heise security.
Videos by heise
The leaker has published excerpts from the data set as evidence. These include databases, customer information and screenshots of customer management portals. It is not yet known whether the data is genuine. It is also still unclear how the cyber criminals obtained the data. According to reports, the data originated from an attack on a service provider in the DevOps sector. But there is currently no confirmation of this either.
(Image:Â Screenshot heise security)
(des)
