Topics of Interest: An Attackers View on APAC's 2021 Three Major Breaches
summary
Covers three 2021 APAC breaches summarized from IHaveBeenPwned and public reports: Raychat leaks ~938,981 records (some reports say 150 million records), caused by a MongoDB misconfiguration and abused by an automated meow scraper; Oxfam Australia exposes 1.8M emails plus partial card and bank fragments, likely via phishing or weak controls; Domino’s India posts 13 TB for sale (claimed 22.5M emails and offered for ~10 BTC), traced to a compromised third party and weak detection.
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:40Platform
- 1:30HIVP
- 3:55Raychat
- 10:02OXFAM
- 12:12Oxford Australia
- 13:08Lessons Learned
- 13:53Dominos
- 14:29What Happened
- 15:35How Did The Breach Occur
- 16:30Mitigations
- 19:30Cardi Mafia
- 22:24Summary
related talks
47mLessons From Billions of Breached Records
01h 01mPwned with Purpose: Where Motives Meet Mayhem
48mLessons From Billions of Breached Records
46mKeynote: Lessons From 11 Billion Breached Records
57mLessons From Billions of Breached Records
59mInside the Breach: Secrets Exposed
01h 00mHow I Met Your Data
40mData Breaches: Barbarians in the Throne Room