What’s Behind the “Cryptojacking”? Hackers Target Hollys Server
TECHWORLD ·
✦ AI Summary
An unauthorized access incident was confirmed in the Hollys membership system, resulting in a personal data breach.
The breach is believed to have occurred between September 3 and October 7, and the affected users were membership subscribers who joined before February 11, 2020.
The company says the cause was an attacker’s abnormal access to cloud services for the purpose of cryptocurrency mining, and it blocked the unauthorized access path and strengthened authentication procedures.
Unauthorized access occurred in Hollys' membership system, resulting in a personal data breach. On the 20th, the industry raised the possibility that the motive behind the intrusion into Hollys' server was Cryptojacking.
On the 16th, Hollys announced in an official statement that it had confirmed a leak of customer personal information. The company said it believes the breach occurred between September 3 and October 7, and that the affected users were membership subscribers who joined before February 11, 2020. The leaked items were IDs, passwords, names, dates of birth, phone numbers, addresses, email addresses, duplicate membership verification information, and other service-use-related information.
The company believes the cause of the incident was an attacker’s abnormal access to cloud services for the purpose of cryptocurrency mining, and says some information was leaked in the process. It also said the leaked data were temporary data files provided in the past for the overhaul of its membership service.
Cryptojacking is a method in which computing resources for cryptocurrency mining are used without authorization by infiltrating another party’s server, computer, or cloud infrastructure. Rather than aiming to steal personal information or demand money, it is intended to generate profit by exploiting system resources.
Common entry points include vulnerabilities in externally exposed applications, leaked access keys, and phishing emails. Such attacks are also expanding to targets such as Kubernetes clusters and cloud infrastructure with weak security settings, and the industry sees them as one of the high-risk forms of cybercrime.
After confirming the incident, Hollys blocked the unauthorized access path and strengthened authentication procedures. It also stepped up monitoring for abnormal login attempts and is cooperating with the investigation after reporting the case to the relevant authorities.
Source: TECHWORLD · Kim Hye-jin
Original: https://www.epnc.co.kr/news/articleView.html?idxno=408484
References
This article was produced with the help of an automated content generation algorithm.
Source: TECHWORLD
View originalThis article was summarized and organized by BizCrush based on the original article from TECHWORLD. For exact quotations and full details, please refer to the original article.