安全研究机构Krebs on Security曝光，暗网服务Nexus声称持有超过153万份美国和加拿大驾驶执照，以及300万份旅行证件，其中美国驾驶执照数量约占全国总数的63%1。Krebs on Security验证了这些驾驶执照的真实性，涉及美国国防部长Pete Hegseth等政府高官证件1。
Nexus声称通过对一家主要身份验证公司的未授权访问获得了这些数据，花费超过一年时间持续外泄，单日数据库驾驶执照数量增加近40万份，表明定期注入新数据1。事件被追溯至身份验证公司IDScan的数据泄露，该公司已启动调查1。
这一泄露事件具有严重的国家安全意义1。美国情报界确认，盗取的数据已被用于对抗美国对华情报工作1。在Krebs发布报道后不久，Nexus服务随即从暗网消失1。近两年来，包括AU10TIX、5CA和National Public Data在内的多家身份验证公司均发生数据泄露事件1。
A dark web service called Nexus has been selling approximately 1.53 million U.S. and Canadian driver's licenses alongside 3 million travel documents, according to reporting by Krebs on Security.1 The breach, which has been traced to identity verification company IDScan, represents a significant national security concern.1
The stolen licenses represent roughly 63 percent of all U.S. driver's licenses in circulation.1 Krebs on Security verified the authenticity of the documents, which include identification materials belonging to high-ranking U.S. government officials such as Defense Secretary Pete Hegseth.1 According to Nexus's claims, the service gained unauthorized access to a major identity verification company and maintained data exfiltration operations over a period exceeding one year.1 Daily database entries show evidence of consistent data injection, with a single day recording nearly 400,000 newly added licenses.1
The U.S. intelligence community has confirmed that stolen identity documents of this nature have been weaponized in intelligence operations targeting American counterintelligence efforts.1 The breach follows a pattern of recent compromises affecting identity verification sector firms, including AU10TIX, 5CA, and National Public Data over the past two years.1 Notably, the Nexus service disappeared from the dark web shortly after Krebs published his investigation.1
评论
还没有评论，欢迎留下第一条。