Story image

Voter databases available on the dark web - report

31 Oct 2018

Endpoint security service provider Carbon Black has announced the release of its Quarterly Incident Response Threat Report (QIRTR), aggregating key findings from incident response (IR) partner investigations during the last 90 days.

The QIRTR aggregates qualitative and quantitative input from 37 Carbon Black IR partners.

The report’s goal is to offer actionable intelligence for business and technology leaders, fueled by analysis of new threats, and insights on how to stop them.

This is Carbon Black’s second quarterly report since introducing the QIRTR in July.

Carbon Black chief cybersecurity officer Tom Kellermann, one of the report’s authors, says, “Our research found that today’s attackers are increasingly punitive, sophisticated and confident.”

“And because of the dark web, they have access to complex tools and compromised infrastructures, including voter databases. This allows attackers to exploit new security vulnerabilities and operate at a higher level of sophistication than before.”

Carbon Black researchers also found 20 different state voter databases available for purchase on the dark web, several from swing states.

Critical information in these offerings include voter IDs, full names, current / previous addresses, genders, phone numbers, and citizenship status, among other information.

According to the research, the dark web also offers hacking and influence campaigns targeting social media sites, as well as hackers for hire, who offer to target government entities for the purposes of database manipulation, economic/ corporate espionage, DDoS attacks and botnet rentals.

In conjunction with the report’s release, Carbon Black hosted its inaugural Incident Response Partner Advisory Council (IR Council) meeting in Chicago on October 30.

The IR Council provides the Carbon Black Incident Response partner community, which totals more than 100 partners, an opportunity to share knowledge and best practices with peers.

IR Council members include security thought leaders from Ankura, Critical Start, Crowe, Grant Thornton, HALOCK Security Labs, IBM, Kroll, Lifars, Nisos Group, NTT Security, Optiv, Rapid7, Sylint and Trustwave.

New threat rears its head in new malware report
Check Point’s researchers view Speakup as a significant threat, as it can be used to download and spread any malware.
Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.
Opinion: 4 Ransomware trends to watch in 2019
Recorded Future's Allan Liska looks at the past big ransomware attacks thus far to predict what's coming this year.