Odido hackers mock the police and hint at another major hack
ShinyHunters says it’s ready for an encore.
Image by Thomas Illustration Fuller via Getty Images.
- ShinyHunters claims it stole data from more than 6.2 million current and former Odido customers.
- The stolen data included names, addresses, phone numbers, bank account numbers, birth dates, and government ID numbers.
- Police released a suspect’s voice recording and asked the public to help identify the Dutch-speaking caller.
- ShinyHunters mocked Dutch police and threatened another large data theft in the Netherlands.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
ShinyHunters, the ransomware extortion group that claimed the cyberattack on Odido earlier this year, says “the police are a joke” and threatens to attack another major company in the Netherlands.
In February, Odido said that it had become the victim of a cyberattack.
The attackers exfiltrated customer data from over 6.2 million current and former customers, including names, postal addresses, telephone numbers, customer IDs, bank account numbers, dates of birth, and government-issued ID numbers, such as passports and driver’s licenses.
On February 24th, ShinyHunters claimed responsibility for the attack. A few days later, the ransomware extortion group published all the stolen data on the dark web because the telecom operator refused to meet its ransom demands.
Authorities have been investigating the incident for months, but still haven’t arrested any suspects.
In an attempt to force a breakthrough, the police have released the suspect’s voice. By releasing the audio clip, the police hope to ascertain the identity of the Dutch-speaking man who called Odido’s customer service.
The man who is now being sought posed as an IT employee of the telecom company over the phone. During that call, the suspect stated that a problem needed to be resolved and that this required logging into an internal system.
The Odido employee genuinely believed he was speaking with a colleague and handed his login credentials to the perpetrator, who was then able to log in to Odido’s systems.
The police are asking anyone who recognizes the voice or has further information to contact the police force.
In a statement, ShinyHunters says that it’s aware of all the latest developments and is monitoring the situation closely.
The ransomware extortion group states that the police will need “all the luck in the world” to catch the suspect they’re looking for. The group also threatens to carry out “another large-scale data theft” in the Netherlands.
“To be honest, the Dutch police are a joke. They can’t do anything,” ShinyHunters told Dutch news outlet RTL Nieuws, calling the police “incompetent, irrelevant, useless.”
