Russian-language underground cybercrime forum where hackers trade stolen data, malware, and exploit kits, and advertise illicit tools and services.
Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.
Perspective Coverage
7 publishersReality
Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.
Perspective Coverage
7 publishersReality
IDScan.net says an unauthorized third party may have accessed or copied full names and government-issued ID numbers from customer accounts on its cloud, after 153 million driver's licenses appeared for sale on a dark web site.
Perspective Coverage
5 publishersReality
Sophos's Counter Threat Unit found the advertisement on August 24. The cheapest tier answered a direct request for a Python remote access trojan with source code, and the service runs on a local model no provider can patch.
Reality
The company says it learned on or around September 1 that data in customer accounts on its cloud may have been copied, and its notice lists names and ID numbers but not the licence scans Nexus was selling.
Perspective Coverage
6 publishersReality
IDScan.net is notifying people about names and ID numbers and offering credit monitoring, while the records Brian Krebs examined each carried infrared and ultraviolet captures, the layer that document authentication actually tests.
Perspective Coverage
4 publishersReality
KrebsOnSecurity traced the records toward New Orleans ID-verification vendor IDScan after nine people matched timestamps on their stolen scans to the day they handed a license over. The FBI's New Orleans field office says it is looking into the incident.
Reality