A 39-year-old Singaporean man accused of being a hacker responsible for over 90 data leaks has been arrested in Thailand.<\/p>\n\n\n\n
According to the Singapore-based cybersecurity firm Group-IB, which assisted the investigation of Singapore and Thailand law enforcement agencies, the suspect has been active on the cybercrime scene since 2020.<\/p>\n\n\n\n
He initially used the online moniker \u2018Altdos\u2019, then changed it to \u2018Desorden\u2019 in 2021, \u2018Ghostr\u2019 in 2023, and \u2018Omid16B\u2019 in 2024.<\/p>\n\n\n\n
Changing his nickname has made it more difficult to track his online activities, but Group-IB said his writing style, the format of his online posts, and preferences for certain data sharing sites, chat applications and targeted regions allowed investigators to connect his attacks.<\/p>\n\n\n\n
\u201cTo attack victims, the cybercriminal leveraged SQL injection tools like sqlmap and exploited vulnerable Remote Desktop Protocol (RDP) servers to gain unauthorized access to sensitive data,\u201d Group-IB said. \u201cThe cybercriminal then installed a beacon of a cracked version of the CobaltStrike to control compromised servers.\u201d<\/p>\n\n\n\n
The hacker is believed to have carried out dozens of attacks. The security firm is aware of more than 90 data leaks impacting organizations around the world. While a majority of his victims were organizations in the APAC region \u2014 he has been described as one of the most active cybercriminals in this region \u2014 he has also targeted companies in North America and Europe.<\/p>\n\n\n\n
Victims included organizations in sectors such as healthcare, finance, retail, property investment, hospitality, e-commerce, technology, logistics, and insurance.<\/p>\n\n\n\n
The hacker exfiltrated sensitive data from the targeted organization\u2019s databases, and then attempted to convince the victim to pay a ransom to avoid having the data made public.<\/p>\n\n\n\n
Initially he did not announce the data breaches on dark web forums and instead notified the media or data protection regulators to put pressure on the victim. In some cases he also contacted the victim\u2019s customers and even encrypted the victim\u2019s data to increase the chances of getting paid.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
A 39-year-old Singaporean man accused of being a hacker […]<\/p>\n","protected":false},"author":2,"featured_media":2760,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-2759","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category--en"],"_links":{"self":[{"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/posts\/2759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/comments?post=2759"}],"version-history":[{"count":0,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/posts\/2759\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/media\/2760"}],"wp:attachment":[{"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/media?parent=2759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/categories?post=2759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/moonsshieldhk.com\/index.php\/wp-json\/wp\/v2\/tags?post=2759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}