Event JSON
{
"id": "d840a948436964ecc170f815cb52ab1e1cc56d2502a5f05a76511c981f96d234",
"pubkey": "14609e2d429cc6b47de05d41a9840716e4d2e0bec59e8bbf79ad79dd7c5def64",
"created_at": 1792417244,
"kind": 1,
"tags": [
[
"t",
"ransomware"
],
[
"emoji",
"blobcatpopcorn",
"https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/170/671/original/828f389466f1c84e.png"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/467/847/579/871/908/original/62f586cb97fd3bc2.png",
"m image/png",
"dim 1214x734",
"blurhash U02YhR-;E1WBDij[S2RjxGWBbvt7-pWBNaof"
],
[
"proxy",
"https://infosec.exchange/users/cR0w/statuses/117467856510046433",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": ":blobcatpopcorn: \n\nhttp://4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion/pingcap/\n\n10.6 TB total exfil • 4,901,203 files • 88 consecutive six-hourly exports of the production control plane, undetected • ~50 GCP storage buckets • a 533.8-million-row BigQuery warehouse • 180,046 tenant organisations • 403,262 unique emails • 115,308 plaintext customer API keys, 42,612 active • 20,645,574 customer SQL statements • 102,003,766 gateway connections • 5,036,738 customer server IPs • 377,446 Jira issues • 433,928 CRM contacts • 92 GB of tenant-tagged AWS cost data • 413 private source repos\n\nThis part might hurt:\n\nPingCAP's security team wrote down exactly what was wrong with the multi-tenant isolation of their own product in 2022. SECURITY-22, from the internal security tracker, in their own words:\n\n#ransomware\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/467/847/579/871/908/original/62f586cb97fd3bc2.png",
"sig": "dd45fc921ba603a06d7df71d5cc072848d7e5c2e06c652c9ba6811f2e0f13209bf4d7f3fa987ee0b3187cad6c862d4abf3e55250eb1469a087b030a09f005ed9"
}
