According to reports, a whopping 60,000plus Email.it users have fallen victim to hackers who are currently selling their data to the dark web.

On Monday, the Italian email service provider said: “Unfortunately, we must confirm that we have suffered a hacker attack.”

Botched extortion effort

The development emerged on Sunday, when the attackers went on Twitter to promote a website on the dark web where the company’s data was being sold.

The hackers – known as NN (No Name) Hacking Group — claim the real interruption occurred more than two years ago, in January 2018. To cite the website:

“We breached Email.it Datacenter more than 2 years ago and we plant ourself like an APT. We took any possible sensitive data from their server and after we choosen to give them a chance to patch their holes asking for a little bounty. They refused to talk with us and continued to trick their users/customers. They didn’t contacted their users/customers after breaches!”

Another message on their site suggests that the hackers attempted to extort Email.it on February 1, when they demanded “a little bounty.”

An Email.it spokesperson said on Monday that the firm didn’t pay and instead informed the Italian Postal Police (CNAIPIC).

After the unsuccessful blackmail attempt, the criminals are now selling the company’s data for a price between 0.5 and 3 bitcoin ($3,500 and $22,000).

According to reports, the databases comprise information on users who signed up for a free Email.it email account.

The criminals also claim possess plaintext SMS messages sent through Email. it’s SMS-sending service.

Additionally, the cybercriminals also said they exfiltrated the source code of all Email.it’s web apps, including admin and customer-facing applications, adding they also have plaintext SMS messages sent through Email.it’s SMS-sending service.

Leave a Reply

Your email address will not be published. Required fields are marked *