Breach Data and the Dark Web
summary
Examines a 2022 Shanghai National Police compromise where threat actor ChinaDan posts 22 terabytes containing roughly 1 billion records with names, addresses, national IDs, phone numbers and incident/crime notes, initially priced at 10 BTC then rapidly undersold to as little as $1,000. Shows that credentials leaked from an Alibaba-hosted repo plus weak hosting allowed exfiltration, traces how forum sales, verification by press, and forum moderation/cleanup unfold, and maps how markets and countersurveillance react.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:26Shanghai National Police (SHGA)
- 2:36BF Breach Forum - Breached.vc
- 5:29Wildfire
- 6:38Chinese infiltrate the forum
- 9:48Breached Systems
- 10:20Inspired by ChinaDan
- 11:45Alibaba Bug Bounty Program
- 12:50Dark Web Hacked Databases
- 13:45Side Affects of Listing | Exposure
- 17:05BreachForum Timeline
- 21:57Finding Breach Data
- 23:39Reputation, Intel, Third Party Services
- 28:46Hunting for Breach Data
- 33:47Breach Data On the Dark Web
- 34:08Dark Arts Village
- 34:23Dark Web Breach Data
related talks
01h 00mHow I Met Your Data
59mInside the Breach: Secrets Exposed
42mAnatomy of a Crime: Secure DevOps or Darknet Early Breach Detection
25mTopics of Interest: An Attackers View on APAC's 2021 Three Major Breaches
57mLessons From Billions of Breached Records
01h 01mPwned with Purpose: Where Motives Meet Mayhem
01h 00mHack to the Future
32mData Heist: How Stolen Information Becomes a Hot Commodity