The developer also sells the orakulas.lt user database: 257 thousand. the. email addresses and passwords



[ad_1]

According to the seller, the database, which was offered for sale on the Raid Forums website on Wednesday, has not been used for a long time, because “no one needed leaked Lithuanian databases.” It seems that the CityBee story has increased that relevance.

The screenshot provided for the “demonstration” of the leaked information shows user logins, email addresses, and partial SHA1-encrypted password information. Email addresses are mostly logged to services like @ one.lt, @ takas.lt, or @ yahoo.com, so it can be assumed that this is a rather old-fashioned part of the orakulas website’s early users list . .lt (the first registered user – “Admin”, whose email address is [email protected]).

OlyBet took over the management of the Orakulas.lt website about six years ago, so it can be assumed that the data is more than six years old; we would probably know the actual age of this data based on the latest users of the database.

Subsequently, in this forum correspondence bar, in which Lithuanian consumers actively participated, the same person who presented the sale offer indicated that orakulas.lt suffered more than one hack in 2015-2018. period, as the site was not filled with an actively exploited void. That loophole was filled only in 2018, just before the removal of the orakulas.lt domain and the redirection of all users to olybet.lt.

Programmers for all these 257 thousand. a user database from which rows with fake or “junk” accounts have been removed and in which nearly 50,000 addresses and passwords have already been cracked, asking for just $ 100 in bitcoin.

But there is another product offered by the same programmer for a higher price: $ 1,500 in bitcoins. The largest dataset consists of 3000 tables, the list of which can be viewed at this address.

Rytis Rainys, head of the National Cyber ​​Security Center, informed BNS that no incidents had been recorded with the Oracle database in the center’s incident management system.

“We, like OlyBet, do not know what information has been leaked online, because it is not our database, or OlyBet’s, but Oracle’s, which no longer exists as a company. We as a company took over Oracle in 2015. There have been no data leaks since that acquisition, so we as a company at OlyBet can affirm that our users are safe. It is important to mention that OlyBet is a separate company operating under a separate betting license, while Oracle operates under a different license. The databases are different. The data provided in the Oracle database is not in the OlyBet database “, – he commented 15 minutes said Tomas Palevičius, CEO of OlyBet.



[ad_2]