TOKYO: Amid a sharp rise in the number of personal data breaches resulting from unauthorised access to companies and other organisations, a study by a security company found that interest in Japanese personal data is growing on the dark web websites used by hackers.
There are also signs of some some seeking information on companies that have disclosed data breaches, and experts are urging caution, warning that “unauthorised access to obtain information for buying and selling information is likely to increase further.”
For the study, conducted by Tokyo-based Mitsui Bussan Secure Directions, Inc. between Oct. 15 and 27, the company accessed about 30 English-, Russian- and Chinese-language dark web sites where information were actively traded, and analysed the posted content and available sample data there.
The dark web is an online space accessible only through the use of anonymisation software designed to conceal user identities. Hacker groups use it to publish stolen personal data and trade malware. Accessing the dark web carries the risk of infecting devices with malware and having the information stored on them stolen.
“Data on 11 million customers; email addresses, names and phone numbers.”
“We accept orders via Telegram direct messages.”
These are some of the posts found on an English-language online bulletin board. At least seven posts on the board claimed to be selling customer data from Japanese companies in the information technology and transportation industries.
These companies had announced data breaches between mid-September and late October. Some posts named specific companies that had disclosed data breaches and expressed a desire to purchase information from them.
Analysing the situation, an engineer at the company who conducted the study, said, “It appears that criminals monitor announcements from Japanese companies. There seems to be a new demand for leaked information.”
Negotiations over a sale were conducted via highly secure apps specified by the sellers and it remains unclear whether any actual purchases were made. However, the engineer said, “As sellers take time to analyse and price leaked data, the trade of leaked data is likely to become more active in the future.”
Leaked information tends to be sold easily. The more supplementary information is included, the higher the price.
For example, credit card information was being traded on a specialised online marketplace for US$24. On a Chinese-language website, 28 sets of images of Japanese driver’s licences and other documents, such as auto insurance documents, were being sold for US$84 each.
On the other hand, there was a post stating that, as multi-factor authentication becomes more widely adopted, usernames and passwords alone are becoming increasingly difficult to exploit and their value is approaching zero. Some usernames and passwords were even being offered for free as a promotion by the posters.
To address these dark web websites, law enforcement agencies in various countries seize their servers or disrupt access by taking down the domains used to connect to them. However, numerous similar websites exist and a cat-and-mouse game takes place in which as soon as they are taken down, they resurface again.
“A series of cyberattacks have exposed the security vulnerabilities of Japanese companies, making them more vulnerable to further attacks.” the engineer pointed out.
“Companies need to gather the latest information through cybersecurity firms and other channels, thoroughly inspect their own systems for vulnerabilities and raise awareness of cybersecurity risks among both their employees and business partners.” - The Japan News/ANN
