SOCRadar Flags Alleged Data Leaks, Network Access and Credentials for Sale
Summary
SOCRadar identified dark-web posts claiming French residential data and IUT Paris Seine records were leaked, U.S. manufacturing access was auctioned, SMTP credentials were dumped, and Apache Struts-compromised server access was for sale. The claims remain unverified.
Key points
- A post claimed a dataset of more than 10 million French residential records, including contact and demographic details, was obtained using IQUALIF.
- A separate post alleged a breach of IUT Paris Seine and access to about 6.8GB of data, along with logs and server information; the claim is unverified.
- An initial access broker advertised VPN and RDP access to a U.S. manufacturing company, claiming its environment included 138 Active Directory hosts.
- A post advertised approximately 19 million SMTP credentials, which could be abused for phishing and other email-based campaigns if authentic.
- Another post offered a tool allegedly exploiting CVE-2017-5638 and access to four compromised servers; the seller claimed remote command execution and persistence.
- SOCRadar presents these items as dark-web threat monitoring findings; the article does not independently verify the claims.
Article Details
- Event Type
- SOCRadar reported several unverified dark web posts advertising alleged data leaks, a breach, initial access, SMTP credentials, and Apache Struts exploit-related server access.
- Impact
- If the claims are valid, exposed French residential records could enable targeted phishing, fraud, and social engineering; the alleged IUT Paris Seine breach could expose institutional data and access-related information; auctioned manufacturing access could enable further intrusion or data theft; and SMTP credentials could support spam and phishing. The Apache Struts post claimed remote command execution, administrative control, and persistence on compromised servers.