Hacker Group Selling Stolen Databases From Public Authorities

A chance actor neighborhood is is referred to as “ARES” that presents in the selling of industry and governmental authority databases has been detected by the CYFIRMA Research personnel.

The term “Ares” has previously been aged to refer to the notorious Trojan malware “Ares Rootkit,” which became employed by hackers to hack into pc programs and steal sensitive files.

By actively searching for alliances with other chance actors and claiming connections with professional hacker groups and ransomware operators, the investigation exhibits that ARES has exhibited behaviors properly matched with “cartel-love habits.”

Cybercriminal groups dangle licensed this affiliation. Leisurely in 2021, this actor made his Telegram debut; since then, he has been linked to the RansomHouse ransomware operation, the KelvinSecurity files leak platform, and the Adrastea community win entry to neighborhood.

ARES Crew runs its web impart material, including database leaks and a discussion board, which could well also make amends for the gap left by the now-defunct Breached discussion board.

An Overview of the Activities of the ARES Crew

Data leaks from 65 countries, including the US, France, Spain, Australia, and Italy, are accessible on the platform ARES Leaks, hosted on the fashioned web.

The web impart material hosts leaks containing a huge option of files, including international replace files, authorities leaks, passports, phone numbers, email addresses, customer runt print, B2B, SSN, and industry databases.

The neighborhood accepts cryptocurrency payments from contributors who desire to win entry to the offered files or aquire one of the companies, which embody disbursed denial of provider (DDoS) assaults, pen-sorting out, vulnerability exploitation, and malware development.

Particularly, following the shutdown of Breached, process on ARES Leaks increased. In consequence, ARES made up our minds to seem malware developers and professional pen-testers to work in Syria on the pause of 2022, providing price in cryptocurrency.

ARES reportedly runs VIP and inner most channels, selling more precious files leaks from famed companies. To boot, Cyfirma researchers explain ARES has recently started trying to originate defense pressure win entry to to databases, actively marketing and marketing its interest thru advertisements on platforms for cybercrime.

LeakBase, one other initiative backed by the ARES chance neighborhood, went live in early 2023. A variety of customers signed up attributable to aggressive promotion and the Breached Hacker Forum closing its doorways.

It presents free databases, a market for selling leaks, leads, exploits, and companies, and an escrow price map to foster have faith.

Also, the discussion board’s sections are dedicated to programming, hacking suggestion, tutorials, social engineering, penetration sorting out, cryptography, anonymity, and opsec discussion.

Closing Tips

“The neighborhood is neat and acknowledges the worth of collaboration among love-minded cybercriminals, to retain their operations,” CYFIRMA researchers.

“The neighborhood appears to dangle determined targets to place itself as a respectable files leak situation and gain a cybercriminal ecosystem for traders and sellers of files and related companies.”

The operations of ARES Leaks pose a fundamental chance to enterprises’ cybersecurity overall. To defend against imaginable attacks from this neighborhood and to be alert about recent cybercriminal ecosystems, enterprises must place in self-discipline thorough safety features.

Linked Learn:

• Police Seized Online page Promoting Malware Worn to Hack Computer programs
• Hackers In the aid of Hive Ransomware Earned $100 Million from 1,300 Victims
• Hackers Promoting Ransomware Victims and Network Win entry to Data for $4 Million
• MyDeal Hacked – Over 2.2M Customers Data Marketed For Sell on a Hacker Forum