Group Advertises Hacking EU Hospitals to Alter COVID Vaccination Records

Summary
DarkOwl reports that a group called xgroup advertised altering EU hospital vaccination records for darknet buyers, but found no proof of its capabilities and assessed the risk to the EU Digital COVID Certificate as low.
Key points
- Xgroup claims buyers can submit personal information and payment to have vaccination records added to local EU hospital databases.
- DarkOwl found no proof that xgroup can carry out the advertised service; the offer could be a scam.
- The group also advertises school-grade changes, social-media account hacking, and debt-clearing services.
- DarkOwl observed xgroup recruiting people with social-engineering skills and soliciting donations for an attack, but the article does not establish successful intrusions.
- US-style address requirements and dollar pricing led DarkOwl to suggest the offer could originate in the United States.
- DarkOwl assessed the risk to the EU Digital COVID Certificate program as low, while noting ransomware groups pose a legitimate risk to hospitals.
Article Details
- Event Type
- Darknet fraud scheme offering purported access to European hospital vaccination records and falsification of COVID vaccination certificates
- Impact
- The group claims it can alter local hospital vaccination records for paying customers, but DarkOwl reports no proof that the capability is genuine and assesses the risk to the EU Digital COVID Certificate program as minimal. The article does not confirm unauthorized access to hospital networks or altered records.
