Israeli Military Data for Sale on Darknet: Major Breach Reported

Cybersecurity experts from ZeroFox have reported that a user with the alias “blackfield” has put up for sale a database containing personal information, photographs, and social media links of members of the Israel Defense Forces (IDF) and the Israel Security Agency (Shabak) on the RAMP hacker forum.

The hacker has set the price for the data package at $15,000 and stated that they will use the forum’s escrow service to ensure a secure transaction. An escrow service acts as a third party to facilitate transactions and ensure that certain conditions are met before the exchange is completed.

Details of the Sale

According to ZeroFox, the information being sold is likely to attract interest from parties with geopolitical motives. The fact that the stolen data is being sold rather than distributed for free suggests that “blackfield” is seeking financial gain rather than pursuing ideological goals. Additionally, the value of such data has significantly increased since the conflict in Israel began. Researchers note that the price for this volume of data is above average.

Experts believe the data was obtained through social media account breaches using credential stuffing techniques. It is also possible that the cybercriminal had access to additional information that allowed them to identify members of the IDF and Shabak.

Potential Buyers and Risks

ZeroFox researchers have concluded that “blackfield” is acting as an Initial Access Broker (IAB), a type of cybercriminal who sells access to compromised networks. Notably, another cybercriminal known as “achillesec,” who is likely associated with ransomware operations, has already shown interest in purchasing the data.

This incident highlights the growing risks of data breaches and the increasing value of sensitive information in the context of ongoing geopolitical conflicts.