RapidFort Allegedly Breached in CanisterWorm Campaign, Data Offered for $40,000
Summary
An actor using the alias xpl0itrs claims 569GB of data from 48 RapidFort S3 buckets was stolen in a CanisterWorm campaign linked to TeamPCP and offered for $40,000. The breach claim is unverified.
Key points
- xpl0itrs claims to be selling data allegedly stolen from RapidFort in a CanisterWorm campaign linked to TeamPCP.
- The seller claims the haul contains 569GB and 140,061 files from 48 S3 buckets.
- The alleged data includes AWS credentials, kubeconfigs, private keys, and customer deployment materials.
- The asking price is reportedly $40,000, negotiable.
- The breach and sale claims are unverified; the article provides no independent confirmation.
Article Details
- Victim Organization
- RapidFort
- Incident Type
- Alleged data breach and data theft
- Data Types Exposed
- Cloud credentials
- Kubeconfigs
- Private keys
- Customer deployment materials
- Affected Records
- 140,061 files reportedly taken, according to the seller; not verified
- Affected Data Size
- 569GB reportedly across 48 S3 buckets, according to the seller; not verified
- Operational Impact
- No operational impact is reported.
- Ransom Or Extortion
- The seller reportedly offered the data for $40,000, negotiable. The claim is unverified.
- Claim Status
- alleged
Threat Actors
TeamPCPThe alleged breach is described as linked to a CanisterWorm campaign involving TeamPCP; the connection and breach claim are unverified.xpl0itrsThe article identifies xpl0itrs as the seller claiming to offer data allegedly stolen from RapidFort; the breach and the seller's role in it are unverified.