Threat Intelligence Brief
Curated summary with source attribution
Source: asianews.network
Threat Risk: Medium
Victim: Bdjobs jobseekers
Incident: Alleged sale of 6 million professional CVs on a dark web forum
Impact: Mass exposure of PII leading to identity theft and targeted social engineering
Attacker: madarax
Analysis: The actor known as ‘madarax’ is attempting to sell PII for six million Bdjobs users, including contact details and employment histories. While Bdjobs denies a direct system breach, they acknowledge that registered employers have access to this data, suggesting a possible insider leak or scraping campaign. This incident underscores the risk of PII exposure on third-party recruitment platforms.
Recommendations: Enable multi-factor authentication on all professional and recruitment accounts; Remain vigilant against highly targeted phishing attacks using professional history; Report any unauthorized use of personal data to the platform and local authorities
Source: Asia News Network
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source