Blahalla

Chrome Extensions Infect 500K Users to Hijack VKontakte Accounts

gbhackers.com · 8 months ago

A malicious Chrome extension campaign hijacked over 500,000 VKontakte accounts, using them to subscribe users to attacker-controlled groups and reset their settings monthly. The extensions, disguised as VK customization tools, utilized a multi-stage architecture with configuration data hidden within VK profile meta tags and hosted on GitHub. The attacker leveraged VK’s own infrastructure as a command-and-control system, manipulating CSRF cookies and tracking donation status for monetization. The extensions involved include IDs ceibjdigmfbbgcpkkdpmjokkokklodmc, mflibpdjoodmoppignjhciadahapkoch, lgakkahjfibfgmacigibnhcgepajgfdb, bndkfmmbidllaiccmpnbdonijmicaafn, and pcdgkgbadeggbnodegejccjffnoakcoh.

BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC Release

www.securityweek.com · 8 months ago

Hackers are actively exploiting a critical vulnerability in BeyondTrust Remote Support and Privileged Remote Access products. The flaw, identified as CVE-2026-1731, allows for unauthenticated remote code execution and impacts thousands of deployments. Attack attempts began within 24 hours of a proof-of-concept exploit being released, with one IP address accounting for the majority of reconnaissance activity. This vulnerability is particularly concerning given BeyondTrust products' widespread use and history of exploitation by threat actors, including those linked to state-sponsored groups.

The democratization of AI data poisoning and how to protect your organization

www.csoonline.com · 8 months ago

AI models are now vulnerable to data poisoning attacks that require fewer malicious inputs than previously thought, with as few as 250 corrupted files capable of distorting model behavior. Attackers can easily inject harmful or biased data into training pipelines, potentially leading to model decay and the insertion of hidden backdoors, such as those capable of data exfiltration. Protecting AI systems involves establishing a clean, validated baseline model, implementing regular resets, and rigorously monitoring incoming data for anomalies, similar to web application filtering. Organizations should prioritize model integrity and assume attempts to manipulate AI behavior will occur.

npm’s Update to Harden Their Supply Chain, and Points to Consider

thehackernews.com · 8 months ago

Following the Sha1-Hulud incident, npm implemented changes including revoking classic tokens and defaulting to session-based tokens with multi-factor authentication for publishing. However, vulnerabilities remain, as attackers can still obtain short-lived tokens through MFA phishing and developers can create bypass tokens similar to the old system. To further improve security, it's recommended to adopt Open ID Connect, enforce MFA for local package uploads, and build packages from verifiable source code to minimize the risk of malicious artifacts. Chainguard Libraries for JavaScript builds from upstream source code, eliminating malware found in 98.5% of compromised packages.

Malicious Chrome AI Extensions Target 260,000 Users with Injected Iframes

gbhackers.com · 8 months ago

Security researchers have identified a coordinated campaign involving thirty malicious Chrome extensions disguised as AI assistants, impacting over 260,000 users. These extensions, which appeared legitimate in the Chrome Web Store, secretly inject iframes and extract data from browser tabs and Gmail accounts, sending it to external servers controlled by the tapnetic[.]pro domain. Attackers use "extension spraying" to evade detection and quickly republish replacements when extensions are removed. The malicious extensions leverage techniques like masquerading and data exfiltration.

CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities

www.securityweek.com · 8 months ago

The Cybersecurity and Infrastructure Security Agency has issued a warning regarding several actively exploited vulnerabilities. A security bypass flaw, tracked as CVE-2025-40536, exists in SolarWinds Web Help Desk, potentially allowing unauthorized access and remote code execution. Additionally, a buffer overflow vulnerability in Apple, CVE-2026-20700, and an update integrity verification flaw in Notepad++, CVE-2025-15556, have been exploited in sophisticated attacks. A critical SQL injection vulnerability, CVE-2024-43468, in Microsoft Configuration Manager has also been added to the list, though prior exploitation reports are limited.

Iran Turns to Digital Surveillance Tools to Track Down Protesters

www.nytimes.com · 8 months ago

Iranian authorities are utilizing digital surveillance tools to identify and detain individuals involved in recent antigovernment protests. These tools include facial recognition technology, tracking phone data, and monitoring mobile devices and web traffic. Some citizens have reported receiving warning text messages, SIM card suspensions, and banking service interruptions as a result of this surveillance. The government's expanded digital surveillance capabilities have been implemented alongside internet blackouts to suppress dissent.

Why key management becomes the weakest link in a post-quantum and AI-driven security world

www.csoonline.com · 8 months ago

Security experts are warning that key management practices have become a critical vulnerability, overshadowing concerns about algorithms like RSA and ECC. Poor key management increases risk during breaches, hinders regulatory compliance, and impedes the ability to adapt to new cryptographic methods, especially with the rise of artificial intelligence. Organizations must prioritize establishing key inventories, shortening key lifetimes, and automating rotation to improve security posture and enable crypto agility. The threat isn’t just algorithm failure; it's the potential for attackers to exploit compromised keys to influence system behavior.

Microsoft fixes bug that blocked Google Chrome from launching

www.bleepingcomputer.com · 8 months ago

Microsoft has resolved a bug affecting its Family Safety parental control service that prevented users from launching Google Chrome and other web browsers. The issue stemmed from a web filtering tool that inadvertently blocked new versions of approved browsers, causing them to crash. A service-side fix was implemented in early February 2026 and should be available to all affected devices within the coming weeks. Users should connect their devices to the internet to receive the update, or enable activity reporting as a temporary workaround.

CISA Alerts Users to Notepad++ Flaw Allowing Code Execution

gbhackers.com · 8 months ago

The Cybersecurity and Infrastructure Security Agency has identified a critical vulnerability in Notepad++ that could allow attackers to execute malicious code. This flaw, tracked as CVE-2025-15556, affects the WinGUp updater component due to a lack of integrity checks when downloading code. Successful exploitation could allow adversaries to run arbitrary code, potentially installing malware or stealing data. Federal agencies must address this vulnerability by March 5, 2026, and users are advised to apply security patches immediately.

New XWorm RAT Campaign Leverages Phishing and CVE-2018-0802 Excel Exploit to Bypass Detection

gbhackers.com · 8 months ago

A new phishing campaign is distributing the XWorm Remote Access Trojan using malicious Excel attachments. The attack begins with themed phishing emails containing a file that exploits CVE-2018-0802, a memory corruption vulnerability in Microsoft’s Equation Editor. The malware downloads and executes a fileless.NET module within Msbuild.exe to avoid detection, ultimately establishing command-and-control communications over encrypted channels. XWorm’s modular design allows for a wide range of malicious activities including data theft, remote control, and DDoS attacks.

Pwning Supercomputers - A 20yo vulnerability in Munge

blog.lexfo.fr · 8 months ago

A critical vulnerability has been discovered in the Munge authentication daemon, used in High Performance Computing clusters. This heap buffer overflow, identified as CVE-2026-25506, allows attackers to leak the Munge secret key, potentially enabling them to forge credentials and impersonate users. The flaw stems from flawed handling of message data during authentication, and impacts versions up to 0.5.17. Exploitation is currently unstable and primarily affects fresh servers, but could be improved to achieve code execution.

OpenClaw 2026.2.12 Released to Patch Over 40 Security Vulnerabilities

gbhackers.com · 8 months ago

The OpenClaw team has released version 2026.2.12, addressing over 40 security vulnerabilities and stability issues. This update includes protections against Server-Side Request Forgery, specifically hardening URL handling with an explicit deny policy and hostname allowlists. Several vulnerabilities were patched, including an API authentication bypass, a sandbox path traversal, and the removal of a potentially malicious bundled component called soul-evil. The release also introduces a breaking change to the POST hooks agent endpoint, preventing session key overrides to prevent session hijacking.

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

thehackernews.com · 8 months ago

Threat actors are actively exploiting a critical security flaw in BeyondTrust products, specifically CVE-2026-1731, which allows for remote code execution. The U.S. Cybersecurity and Infrastructure Security Agency has added several vulnerabilities to its Known Exploited Vulnerabilities catalog, including CVE-2026-20700 affecting Apple devices, CVE-2025-15556 impacting Notepad++, CVE-2025-40536 concerning SolarWinds Web Help Desk, and CVE-2024-43468 related to Microsoft Configuration Manager. The Lotus Blossom threat actor group has been linked to the exploitation of CVE-2025-15556, delivering a backdoor called Chrysalis. Federal agencies have deadlines to address these vulnerabilities.

Chrome 145 Patches 11 Vulnerabilities

www.securityweek.com · 8 months ago

Google has released Chrome version 145, addressing eleven security vulnerabilities. Three of those are considered high severity, including a use-after-free issue in CSS, a heap buffer overflow in Codecs, and an inappropriate implementation in WebGPU. Several medium and low-severity vulnerabilities were also resolved, with Google awarding over 18000 dollars in bug bounties to researchers. The patched vulnerabilities include CVE-2026-2313, CVE-2026-2314, CVE-2026-2315, CVE-2026-2316, CVE-2026-2317, and others.

OysterLoader Evasion Tactics Exposed: Advanced Obfuscation and Rhysida Ransomware Ties Uncovered

gbhackers.com · 8 months ago

OysterLoader, also known as Broomstick and CleanUp, is a multi-stage malware linked to the Rhysida ransomware group and used in malvertising and SEO-poisoning campaigns. The malware employs a four-stage infection process, utilizing techniques like API flooding, custom dynamic API resolution, and steganography to evade detection. It delivers payloads such as Rhysida ransomware and Vidar info-stealers, communicating through evolving command and control infrastructure including domains like grandideapay[.]com and cardlowestgroup[.]com. Security teams are advised to monitor for signed MSI installers, abnormal API behavior, and characteristic C2 patterns.

CISA Issues Urgent Warning on Microsoft Configuration Manager SQL Injection Vulnerability Under Active Exploitation

gbhackers.com · 8 months ago

The Cybersecurity and Infrastructure Security Agency has warned of a critical SQL injection vulnerability, CVE-2024-43468, affecting Microsoft Configuration Manager. Threat actors are actively exploiting the flaw, allowing them to execute commands on vulnerable servers without authentication. This vulnerability gives attackers access to sensitive configuration data and the ability to move within enterprise networks. Federal agencies are required to apply vendor mitigations by a specific date, and organizations are urged to patch immediately and monitor for suspicious activity.

AI-Driven Phishing and QR Code Quishing Surge in 2025 Spam and Phishing Report

gbhackers.com · 8 months ago

The 2025 spam and phishing landscape is seeing a surge in AI-generated phishing emails and QR code-based attacks, known as "quishing." Attackers are using generative AI to create highly personalized and convincing messages, mimicking brand styles and even deploying look-alike chatbot interfaces. A large-scale campaign is exploiting pirated games and cracked software to distribute malware, including RenEngine, HijackLoader, Lumma, and ACR Stealer, impacting hundreds of thousands of systems globally. Security measures should focus on enhanced user training, advanced detection techniques, and blocking of pirated software to combat these evolving threats.

5 key trends reshaping the SIEM market

www.csoonline.com · 8 months ago

false

next-mdx-remote Vulnerability Allows Arbitrary Code Execution in React SSR

gbhackers.com · 8 months ago

A security flaw has been discovered in the next-mdx-remote library, allowing for arbitrary code execution. The vulnerability, CVE-2026-0969, impacts versions 4.3.0 through 5.0.0 and stems from insufficient sanitization of MDX content when JavaScript expressions are enabled. HashiCorp has released version 6.0.0 to address the issue, disabling JavaScript expressions by default and introducing a safety layer for those needing to use them. Users are urged to upgrade and carefully configure security options to mitigate the risk.

China Revives Tianfu Cup Hacking Contest Under Increased Secrecy

www.securityweek.com · 8 months ago

China’s Tianfu Cup hacking competition has resumed under heightened government control and secrecy. The event, previously known for substantial prize money, now features a smaller prize pool of approximately $140,000. This year's competition included targets such as iPhone 17, Xiaomi 14 Ultra, Windows 11, and various cloud and virtualization products like VMware ESXi. A new feature involved using AI agents to identify vulnerabilities, and regulations require Chinese citizens to report zero-day vulnerabilities to the government, raising concerns about potential state-sponsored cyberespionage operations.

New ClickFix Attack Wave Targets Windows Systems to Deploy StealC Stealer

gbhackers.com · 8 months ago

A new cyber campaign is targeting Windows users through fake Cloudflare CAPTCHA verification pages, employing social engineering to trick them into running malicious PowerShell commands. This multi-stage attack delivers StealC, an information stealer that harvests credentials, cryptocurrency wallets, and system data, without writing files to disk. The process uses a combination of techniques including Donut-based shellcode and reflective PE loading to evade detection, ultimately injecting StealC into a legitimate Windows process. Threat actors are utilizing infrastructure at IP addresses including 91.92.240.219 and 91.92.240.190.

BADIIS Malware Targets Over 1,800 Windows Servers in Massive SEO Poisoning Attack

gbhackers.com · 8 months ago

A widespread SEO poisoning campaign, dubbed REF4033, has compromised over 1,800 Windows IIS servers globally, impacting governments, educational institutions, and corporations. The BADIIS malware, deployed by a Chinese-speaking cybercrime group, redirects users to illicit gambling, pornography, and cryptocurrency scam sites. Attackers rapidly deploy the malware, creating local accounts, escalating privileges, and installing a malicious Windows service, WalletServiceInfo, which loads unsigned DLLs to manipulate IIS configurations and inject SEO content. The modules operate as native IIS modules, evading detection while controlling traffic based on User-Agent and Referer headers.

Zimbra Issues Security Update to Address XSS, XXE, and LDAP Injection Flaws

gbhackers.com · 8 months ago

Zimbra has released a critical security update, version 10.1.16, to address several high-severity vulnerabilities. Patches include fixes for Cross-Site Scripting, LDAP injection, and XML External Entity vulnerabilities, which could lead to unauthorized access and data theft. The update also enhances Cross-Site Request Forgery protection and introduces improvements to the Backup and Restore module. Administrators are urged to back up their systems before applying the update due to a “High” deployment risk.

BeyondTrust RCE Vulnerability Under Active Exploitation – Urgent Patch Released

gbhackers.com · 8 months ago

BeyondTrust has released urgent security updates to address a critical remote code execution vulnerability affecting its Remote Support and Privileged Remote Access products. The flaw, designated CVE-2026-1731, allows unauthenticated attackers to execute commands without credentials. Approximately 11,000 instances are exposed online, and organizations using on-premise deployments must manually apply the patch. BeyondTrust automatically applied fixes to cloud-hosted customers, but self-managed systems require immediate action.

Hackers turn bossware against the bosses

www.csoonline.com · 8 months ago

Cybercriminals are exploiting legitimate employee monitoring software, Net Monitor for Employees, and a remote management platform, SimpleHelp, to deploy ransomware and steal cryptocurrency. Attackers have used these tools to evade detection, tamper with security software, and establish persistent remote access, often gaining initial access through compromised vendor VPN accounts. Security experts advise organizations to inventory all applications, strengthen identity and access management, and prioritize security awareness training to prevent unauthorized installations and potential abuse. In June 2025, CISA warned of ransomware operators exploiting unpatched SimpleHelp RMM vulnerabilities.

Trump’s campaign against ‘left-wing’ media finds a new target: Apple News

www.washingtonpost.com · 8 months ago

A regulator appointed by President Donald Trump has warned Apple over potential legal violations related to its news curation practices. The Federal Trade Commission chairman expressed concern that Apple News may be promoting left-leaning news outlets while suppressing conservative publications. He stated that while he is not the speech police, Apple’s article choices raise concerns. The warning highlights an ongoing campaign against media perceived as "left-wing."

Why Tech Giants Are Accused of Causing Social Media Addiction

www.nytimes.com · 8 months ago

Several tech companies including Meta, TikTok, Snap, and YouTube are facing legal action. Plaintiffs claim these companies’ platforms are addictive and have caused personal injury. These landmark trials aim to examine the impact of social media on users. The legal proceedings could have significant consequences for both the technology industry and social media users.

Russia tries to block WhatsApp, Telegram in communication blockade

www.bleepingcomputer.com · 8 months ago

The Russian government is attempting to block WhatsApp, following similar restrictions on Telegram. Authorities cite countering crime and fraud as the reasoning, while Meta, WhatsApp’s parent company, is labeled an extremist entity. The move comes as Russia promotes its own messaging app, MAX, raising concerns about its security and data collection practices. Russian officials have indicated a willingness to allow WhatsApp to resume operations if Meta complies with local laws.

Anthropic Is Valued at $380 Billion in New Funding Round

www.nytimes.com · 8 months ago

false

Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again

www.darkreading.com · 8 months ago

Hackers exploited vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM) software, impacting several European government agencies. Two critical remote code execution vulnerabilities, CVE-2026-1281 and CVE-2026-1340, were disclosed on January 29th. Following the disclosure, attacks targeted the European Commission and agencies in the Netherlands and Finland, compromising staff information. Experts suggest organizations improve perimeter security by minimizing exposure and implementing aggressive monitoring to prevent exploitation and limit network access.

These Mathematicians Are Putting A.I. to the Test

www.nytimes.com · 8 months ago

false

Bitwarden introduces ‘Cupid Vault’ for secure password sharing

www.bleepingcomputer.com · 8 months ago

false

Critical Apple Flaw Exploited in ‘Sophisticated’ Attacks, Company Urges Rapid Patching

www.techrepublic.com · 8 months ago

Apple has released urgent security updates to address a zero-day vulnerability, CVE-2026-20700, that was actively exploited in sophisticated, targeted attacks. The flaw impacts multiple Apple operating systems and allows attackers to execute arbitrary code. This vulnerability was exploited alongside CVE-2025-14174 and CVE-2025-43529, suggesting a possible exploit chain. Users are urged to immediately update their devices to the latest versions of iOS, iPadOS, and macOS.

Critical BeyondTrust RCE flaw now exploited in attacks, patch now

www.bleepingcomputer.com · 8 months ago

A critical remote code execution vulnerability, tracked as CVE-2026-1731, is now being exploited in attacks targeting BeyondTrust Remote Support and Privileged Remote Access appliances. The flaw allows unauthenticated attackers to execute commands and potentially compromise systems, with a CVSS score of 9.9. Hacktron discovered the vulnerability and reported it to BeyondTrust, revealing that approximately 11,000 instances were exposed online. Attackers are exploiting the vulnerability by targeting exposed portals to retrieve identifiers and execute commands.

Critical RCE Vulnerability in Unstructured.io (CVE-2025–64712) - CVSS 9.8

www.cyera.com · 8 months ago

A critical vulnerability, CVE-2025, 64712, has been discovered in Unstructured.io, a data processing library widely used by businesses, including 87% of Fortune 1000 companies. The vulnerability allows attackers to write arbitrary files and potentially achieve remote code execution on affected systems. It stems from a path traversal bug in how the library handles attachments within Microsoft Outlook email files, specifically when processing.msg files. Unstructured.io has released version 0.18.18 to address the issue.

SpecterOps Launches BloodHound Scentry to Accelerate the Practice of Identity Attack Path Management

www.darkreading.com · 8 months ago

false

Gone With the Shame: One in Two Americans Are Reluctant to Talk About Romance Scam Incidents

www.darkreading.com · 8 months ago

A recent survey indicates that over half of Americans who have lost money to romance scams feel it’s more shameful than other types of fraud, leading many to remain silent. Men are disproportionately affected, with nearly twice as many reporting losses compared to women, particularly those aged 35 to 44. Significantly, almost a fifth of victims do not report these incidents, often prioritizing emotional recovery over financial concerns. Experts recommend reporting to the FBI Internet Crime Complaint Center and the Federal Trade Commission.

Microsoft: New Windows LNK spoofing issues aren't vulnerabilities

www.bleepingcomputer.com · 8 months ago

Security researcher Wietze Beukema has identified techniques for manipulating Windows shortcut files to trick users into executing unintended programs. Attackers can craft deceptive shortcuts that display one target path but run another, effectively hiding command-line arguments and malicious payloads. Microsoft declined to classify these techniques as vulnerabilities, stating they require user interaction. The discovered methods involve manipulating data structures within LNK files and are being used by groups exploiting CVE-2025-9491, which was silently mitigated by Microsoft.

Those 'Summarize With AI' Buttons May Be Lying to You

www.darkreading.com · 8 months ago

Researchers have discovered a new tactic called AI recommendation poisoning, where hidden instructions are embedded within "Summarize With AI" buttons on websites. These instructions can manipulate AI assistants like ChatGPT and Microsoft 365 Copilot to prioritize specific information or recommendations, potentially benefiting businesses and creating unfair competitive advantages. Microsoft observed 50 unique instances of these attempts over 60 days, involving 31 companies, and notes that readily available tools simplify the process. The effectiveness of the tactic depends on factors like the AI assistant being used and whether the user is logged in.

Copilot Studio agent security: Top 10 risks you can detect and prevent

www.microsoft.com · 8 months ago

Microsoft has identified ten critical security risks associated with Microsoft Copilot Studio agents. These risks include overly permissive access, hard-coded credentials, unmanaged integrations, and a lack of guidance. Organizations are advised to implement strong authentication, least privilege access, and regular reviews to prevent exploitation and treat these agents as critical production assets. Microsoft Defender and Advanced Hunting can be utilized for proactive detection and mitigation of these vulnerabilities.

Gail Slater Leaves Role as Justice Dept.’s Antitrust Chief

www.nytimes.com · 8 months ago

false

Romania's oil pipeline operator Conpet confirms data stolen in attack

www.bleepingcomputer.com · 8 months ago

Romanian oil pipeline operator Conpet S.A. confirms a data breach by the Qilin ransomware gang. The attackers stole nearly 1 terabyte of data, including confidential documents with personal information like names, addresses, and bank account details. Conpet is working with the Romanian National Cyber Security Directorate to investigate the incident. The company warns potentially affected individuals to be cautious of fraudulent requests.

‘Dead’ Outlook add-in hijacked to phish 4,000 Microsoft Office Store users

www.csoonline.com · 8 months ago

A hacker hijacked an abandoned Outlook add-in called AgreeTo to conduct a phishing campaign targeting Microsoft Office Store users. The attacker exploited a weakness in Microsoft’s add-in delivery architecture, which allows for live content fetching from developer servers, bypassing the initial review process. This allowed them to redirect users to a fake Microsoft sign-in page, successfully stealing credentials from approximately 4,000 users. The attacker also operated multiple phishing kits impersonating various financial institutions, and Microsoft has since removed AgreeTo from its marketplace.

Microsoft’s February Patch Tuesday Fixes 6 Zero-Days Under Attack

www.techrepublic.com · 8 months ago

Microsoft has released security updates for 58 vulnerabilities across Windows, Office, and related products. Six of these vulnerabilities are zero-day flaws, meaning they are actively exploited. Several vulnerabilities allow attackers to bypass security features, execute code, or gain elevated privileges. Affected CVEs include CVE-2026-21510, CVE-2026-21513, CVE-2026-21514, CVE-2026-21519, CVE-2026-21533, and CVE-2026-21525. The Cybersecurity and Infrastructure Security Agency has added these vulnerabilities to its Known Exploited Vulnerabilities catalog, setting a March 3 deadline for federal agencies to patch.

Laid-Off Battery Plant Workers Pin Blame on Ford, not Trump, for Lost Jobs

www.nytimes.com · 8 months ago

false

Urgent warnings from UK and US cyber agencies after Polish energy grid attack

www.fortra.com · 8 months ago

NULL

Neue Warn-App für Cybervorfälle gestartet

www.csoonline.com · 8 months ago

A new smartphone application called CYROS is now available to warn users about cyber threats. Developed by the Cyberintelligence Institute, the app compiles security alerts from agencies like the German Federal Office for Information Security and consumer protection organizations. CYROS organizes these alerts by topic, region, and state, providing tailored information and assistance. The application aims to empower users to take action and improve overall cybersecurity in Germany.

Dutch mobile phone giant Odido announces data breach

therecord.media · 8 months ago

Dutch mobile phone provider Odido recently confirmed a cyberattack resulting in the theft of customer data. Approximately 6.2 million people had their personal information stolen, including names, bank account numbers, and identification documents. The attack occurred on February 7th and involved a compromised customer contact system. Odido is contacting affected customers and warning them about potential phishing attempts.

Odido data breach exposes personal info of 6.2 million customers

www.bleepingcomputer.com · 8 months ago

Dutch telecommunications provider Odido has confirmed a cyberattack resulting in a data breach impacting 6.2 million customers. Attackers gained access to a customer contact system, potentially exposing personal information like names, addresses, mobile numbers, customer numbers, email addresses, IBANs, dates of birth, and identification data. Passwords, call logs, billing information, and scans of identification documents were not compromised. Odido has secured the system, notified authorities, and is informing affected customers.