Mass Trading of Cyber Exploits and Data Breaches Detected on Dark Web

• •Alleged mass trading of zero-day exploits and financial databases detected on dark web.
• •Threat actors include LazaKNOXGroup and xynapse, with evidence of their activities visible but unverified.
• •Phishing campaigns targeting financial institutions are a significant concern.

A global alert has been issued regarding the alleged mass trading of zero-day exploits and financial databases on underground forums. The VECERT Analyzer reported multiple advanced attack vectors, including remote code execution vulnerabilities and compromised crypto-asset user databases. Threat actors such as LazaKNOXGroup and xynapse are implicated, with evidence of their activities visible but unverified. The scope includes potential phishing campaigns targeting financial institutions and unauthorized access to various systems, including NAS devices and IP-PBX systems. Additionally, a report highlighted ongoing DDoS attacks by groups like NoName057 and BD Anonymous against Japanese government entities. The Vodafone core database compromise has also surfaced, with an actor claiming access but withholding full disclosure. The situation remains fluid, with ongoing monitoring and recommendations for enhanced security measures.