📌 Quick Facts
🔗 DarkWebInformer.com - Cyber Threat Intelligence
📅 Date: 2025-03-03 21:06:57
🚨 Title: Alleged Sale of HQ Crypto Leads from Multiple Cryptocurrency Platforms
🛡️ Victim Country: Not Specified
🏭 Victim Industry: Cryptocurrency & Financial Services
🏢 Victim Organization: Not Specified
🌐 Victim Site: Not Specified
📜 Category: Data Leak
🔗 Claim: https://forum.exploit.in/topic/255161/
🕵️♂️ Threat Actor: mattzimmer
🌍 Network: OpenWeb
📝 What Happened?
A threat actor identified as mattzimmer has advertised the sale of high-quality cryptocurrency leads, allegedly containing full user information or SMS leads from multiple cryptocurrency exchanges. The seller claims to offer data from platforms including:
- Binance (Email & Phone Checked)
- Coinbase (Email Checked)
- KuCoin (Email & Phone Checked)
- CoinSpot (Australia) Email Checked
- Shakepay (Canada) Phone Checked
Additionally, newly listed datasets include phone number leads from:
- Gate.io
- Bybit
- OKX
- HTX
- Kraken
The seller specifies that prices start at $300 per 1,000 records and invites potential buyers to contact them via Telegram.
📊 Compromised Access Details
- Email and phone number databases from major cryptocurrency exchanges
- Potential exposure of personally identifiable information (PII), including full user records
- Possible misuse for phishing, account takeovers, and financial fraud
🛡 WhiteIntel.io Data Leak Information
(No victim site disclosed)
⚠ Implications
- Credential Stuffing & Account Takeovers – Leaked contact information can be used in targeted attacks against users.
- Phishing & Social Engineering Risks – Fraudsters can exploit the data to impersonate cryptocurrency platforms.
- Regulatory & Compliance Issues – Potential GDPR and financial regulations violations for affected exchanges.
🔧 Recommended Actions
- Alert Affected Users & Implement Security Measures – Notify users of potential phishing threats and enforce multi-factor authentication (MFA).
- Enhance Fraud Detection Systems – Monitor for unauthorized login attempts from compromised credentials.
- Investigate Source of the Leak – Cryptocurrency exchanges should conduct internal security audits.
- Educate Users on Phishing Risks – Encourage users to verify communication channels before responding to messages.
⚠ Stay vigilant. Follow DarkWebInformer.com for real-time updates on cyber threats.
