Hacker Buba, a criminal, began exposing client data online after he demanded a $3 million ransom from Invest Bank in the UAE.
Information from Invest Bank corporate accounts was largely tweeted by hacker Buba. In order to prevent the exposure of the private data, he demanded payment of a $3 million Bitcoin ransom.
Along with the name Invest Bank, the tweet contained a link to a website run by hacker Buba that hosted six zip files holding the bank's data.
The Daily Dot reports that one of the archives examined by the news organisation included bank clients' financial information, suggesting that the material disclosed by Hacker Buba is authentic.
Source: https://securityaffairs.com/42544/cyber-crime/hacker-buba-3m-ransom.html
TPRM report: https://scoringcyber.rankiteo.com/company/investbank-p.s.c.
"id": "inv1233261023",
"linkid": "investbank-p.s.c.",
"type": "Breach",
"date": "12/2015",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Banking',
'location': 'UAE',
'name': 'Invest Bank',
'type': 'Financial Institution'}],
'attack_vector': 'Social Media (Twitter), Data Exposure via Website',
'data_breach': {'data_exfiltration': 'Yes',
'file_types_exposed': ['Zip Files'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Financial Information']},
'description': 'Hacker Buba, a criminal, began exposing client data online '
'after he demanded a $3 million ransom from Invest Bank in the '
'UAE. Information from Invest Bank corporate accounts was '
'largely tweeted by hacker Buba. In order to prevent the '
'exposure of the private data, he demanded payment of a $3 '
'million Bitcoin ransom. Along with the name Invest Bank, the '
'tweet contained a link to a website run by hacker Buba that '
"hosted six zip files holding the bank's data. The Daily Dot "
'reports that one of the archives examined by the news '
"organisation included bank clients' financial information, "
'suggesting that the material disclosed by Hacker Buba is '
'authentic.',
'impact': {'data_compromised': ['Financial Information of Bank Clients']},
'motivation': 'Financial Gain',
'ransomware': {'data_exfiltration': 'Yes', 'ransom_demanded': '$3 million'},
'references': [{'source': 'The Daily Dot'}],
'threat_actor': 'Hacker Buba',
'title': 'Data Breach and Ransom Demand at Invest Bank',
'type': 'Data Breach, Ransomware'}