How Darknet Data Exposure Raises Risks for Individuals and Organizations
Summary
The article explains how exposed data on the darknet can raise cyber risk for organizations and individuals, outlining threats including credential stuffing, phishing, extortion, and vendor compromise, along with ways to assess exposure and reduce personal account risks
Key points
- The article describes risk in terms of threats, vulnerabilities, consequences, and adversary intent; exposed data’s volume, location, duration, and targeting can affect risk.
- Darknet and deep-web communities may contain exposed credentials, personal and financial information, and sensitive corporate data.
- Corporate risks include stolen-data extortion, counterfeit goods, executive-targeted phishing and social engineering, and threats introduced through suppliers and other third parties.
- Credential stuffing uses previously exposed email-and-password combinations to test logins across services; successful access can expose personal and financial information.
- The article describes SMS delivery-notice phishing that uses links, sometimes shortened through bit[.]ly, to solicit information and collect device details.
- Suggested precautions include using unique, complex passwords and password managers, monitoring relevant company and executive mentions, and contacting a bank about compromised identity or account information.
Article Details
- Topic
- How darknet-exposed data informs cybersecurity risk for corporations and individuals
MITRE ATT&CK
T1110.004 · Credential StuffingThe article describes credential stuffing: testing exposed username and password combinations against commercial websites.T1566.002 · Spearphishing LinkThe article describes phishing messages containing links to fake websites designed to collect victims' personal information.