Zerosecurity
  • Home
  • Security
    • Exploits
    • Mobile Security
  • Malware
  • Data Breaches
  • Crypto
  • Privacy
  • Downloads
    • Malwarebytes
    • Exploits
    • Paper Downloads
    • Software & Service Reviews
No Result
View All Result
SUBSCRIBE
Zerosecurity
  • Home
  • Security
    • Exploits
    • Mobile Security
  • Malware
  • Data Breaches
  • Crypto
  • Privacy
  • Downloads
    • Malwarebytes
    • Exploits
    • Paper Downloads
    • Software & Service Reviews
No Result
View All Result
Zerosecurity
No Result
View All Result
Home Security

Over 70,000 servers available on Russian forum xDedic

Paul Anderson by Paul Anderson
June 16, 2016
in Security, Data Breaches
0
xDedic marketplace login
74
SHARES
1.2k
VIEWS
Share on FacebookShare on Twitter

Security researchers from Kaspersky Lab have recently investigated a huge Russian underground marketplace, called xDedic, This marketplace has more than 70,000 hacked servers online and for sale.

You might also like

BreachForums Owner Arrested and Charged

US politicians personal details compromised in hack

Acer corporate confirms breach – data being sold for Monero

Anyone as able to buy access, and the servers are going for as little as a single payment of $6 for access to everything on the server.

xDedic marketplace

The analysts verified that the xDedic marketplace is run by a Russian group and it’s currently offering 70,624 Remote Desktop Protocol (RDP) servers located in 173 different countries by 416 unique sellers.

xDedic is a great instance of a crime-as-a-service, it’s a well-organized cybercriminal marketplace that’s providing everyone from entry-level cybercriminals to huge players in the scene. You can easily obtain cheap and easy access to established company infrastructure.

The servers include reputable organizations, government networks, corporations, and universities that apparently unaware of the security breach.

Cybercriminals might use the server to carry out phishing campaigns, targeted attacks or launch a variety of attacks with malware or distributed denial-of-service (DDoS).

The analysis on the xDedic marketplace began after a European internet service provider (ISP) notified Kaspersky.

After hackers breach a server via a brute-force attack they’re able to resell the access on the xDedic marketplace. It’s as easy as that.

“The process is simple and thorough: hackers break into servers, often through brute-force attacks, and bring the credentials to xDedic. The hacked servers are then checked for their RDP configuration, memory, software, browsing history and more – all features that customers can search through before buying.” Kaspersky stated in the report.

Currently xDedic offers:

  • Servers belonging to government networks, corporations and universities
  • Servers tagged for having access to or hosting certain websites and services, including gaming, betting, dating, online shopping, online banking and payment, cell phone networks, ISPs and browsers
  • Servers with pre-installed software that could facilitate an attack, including direct mail, financial and PoS software
  • All supported by a range of hacking and system information tools.

xDedic marketplace has been active since 2014 and peaked in activity in the middle of 2015. Here’s an infographic published by Kaspersky’s blog:

xDedic-marketplace

Kaspersky advises corporations to ensure they have robust security solutions as well as adopting password policies and the usage of strong authentication mechanisms. All devices must be continuously checked and patched.

Tags: hackedserversxDedic
Share30Tweet19
Paul Anderson

Paul Anderson

Editor and chief at ZeroSecurity. Expertise includes programming, malware analysis, and penetration testing. If you would like to write for ZeroSecurity, please click "Contact us" at the top of the page.

Recommended For You

BreachForums Owner Arrested and Charged

by Paul Anderson
March 17, 2023
0
BreachForums Owner Arrested and Charged

On Wednesday afternoon, federal agents arrested a man in Peekskill, New York, for allegedly running a dark web data breach site known as "BreachForums." The suspect, Conor Brian...

Read more

US politicians personal details compromised in hack

by Kyle
March 9, 2023
0
US politicians personal details compromised in hack

A hacker has claimed that personally identifiable information (PII) belonging to several members of the US Congress may have been compromised in a cyberattack on DC Health Link,...

Read more

Acer corporate confirms breach – data being sold for Monero

by Kyle
March 8, 2023
0
Acer corporate confirms breach – data being sold for Monero

Acer, the sixth-largest PC maker in the world, has confirmed that it suffered a data breach in mid-February 2023 that compromised its intellectual property and other sensitive data....

Read more

Stolen credit card market BidenCash leaks over 2 million credit cards

by Paul Anderson
March 3, 2023
0
Stolen credit card market BidenCash leaks over 2 million credit cards

BidenCash, a marketplace that focuses on carding, has leaked a database of 2,165,700 credit and debit cards to celebrate its first anniversary. Instead of keeping the leak a...

Read more

Blackmailing data thieves who targeted thousands of businesses apprehended

by Paul Anderson
February 26, 2023
0
Blackmailing data thieves arrested by Dutch police

The Dutch police recently apprehended three additional suspects in what is considered one of the most significant data extortion cases to date. These suspects, aged between 18 and...

Read more
Next Post
FBI in possession of 411 Million facial recognition photos

FBI in possession of 411 Million facial recognition photos

Related News

BreachForums Owner Arrested and Charged

BreachForums Owner Arrested and Charged

March 17, 2023
ChipMixer platform tied to crypto laundering scheme – seized by authorities

ChipMixer platform tied to crypto laundering scheme – seized by authorities

March 17, 2023
NSA intercepting U.S. Routers

NSA intercepting U.S. Routers

June 6, 2014 - Updated on March 17, 2023
Zerosecurity

We cover the latest in Information Security & Blockchain news, as well as threat trends targeting both sectors.

Categories

  • Crypto
  • Data Breaches
  • DotNet Framework
  • Downloads
  • Exploits
  • Exploits
  • Information
  • Legal
  • Malware
  • Malware Analysis
  • Mobile Security
  • Paper Downloads
  • Piracy
  • Privacy
  • Programming
  • Public
  • Security
  • Security
  • Software & Service Reviews
  • Technology News
  • Tools
  • Tutorials
  • Video Tutorials
  • Whitepapers
  • Zero Security
  • Contact Us
  • List of our Writers

© 2022 ZeroSecurity, All Rights Reserved.

No Result
View All Result
  • Home
  • Security
  • Exploits
  • Data Breaches
  • Malware
  • Privacy
  • Mobile Security
  • Tools
  • Contact Us
  • Privacy Policy

© 2022 ZeroSecurity, All Rights Reserved.