Paytm Mall suffers massive breach, ransom demanded: Report


New Delhi, Aug 30 (IANS): A cybercrime group demanded ransom after gaining unrestricted access to the entire databases of e-commerce platform Paytm Mall, online intelligence firm Cyble said on Sunday.

An insider is suspected to have helped the hacking group gain access to the database.

The group with the alias "John Wick" was able to upload a backdoor/Adminer on Paytm Mall application/website, said the report.

It appears the breach affects all accounts and related information at Paytm mall, it added.

"Our sources also forwarded us the messages where the perpetrator also claimed they are receiving the ransom payment from the Paytm mall as well," Cyble said, adding that it could not confirm if the ransom was actually paid.

Leaking data when failing to meet hackers demands is a known technique deployed by various cybercrime groups, including ransomware operators, the online intelligence firm said.

The perpetrator claimed the hack happened due to an insider at Paytm Mall.

The claims, however, are unverified.

In 2019, the company faced a fraud allegedly caused due to their junior employees.

Paytm Mall was yet to respond to the report of the data breach.

 

 

  

Top Stories

Comment on this article

  • Jossey Saldanha, Mumbai

    Sun, Aug 30 2020

    Make in China ...

    DisAgree [1] Agree [8] Reply Report Abuse

  • CA girishkk, M'lore/DXB

    Sun, Aug 30 2020

    Digital Hindustan....!!!!

    What will happen to bank accounts and adhaar data.., now one ration card also is also potentially subject to hack...,

    Make in Hindustan ....???? or can we call it Jokara class...!!!

    On a lighter side..., Chai is the only solution...!!!

    Jh
    Hind

    DisAgree Agree Reply Report Abuse


Leave a Comment

Title: Paytm Mall suffers massive breach, ransom demanded: Report



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.