Incident Overview

The threat actor claims to be selling a large collection of cryptocurrency wallet seed phrases and private keys, allegedly totaling approximately 600 million entries. The actor states that 70% of the dataset consists of seed phrases, with a minimum of 1 million active seed phrases, while the remainder includes various private keys obtained through different methods.

According to the listing, the data was obtained from multiple sources including logs, mining operations, purchasing activities, and private databases. The actor also mentions the existence of a public dataset in addition to the material being offered for sale.

The claimed offering details include:

• Approximately 600 million total entries
• 70% seed phrases (minimum 1 million active)
• 30% various private keys
• Data allegedly obtained from logs, mining, purchasing, and private databases
• Reference to an associated public dataset
• Price listed as $1,000 (with bargaining noted as acceptable)
• Three copies claimed to be available for sale

This type of data could enable direct unauthorized access to cryptocurrency wallets, potentially leading to theft of digital assets. The claim has not been independently verified.