{"id":25231,"date":"2024-09-23T06:10:06","date_gmt":"2024-09-23T14:10:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2024\/09\/23\/news-18961\/"},"modified":"2024-09-23T06:10:06","modified_gmt":"2024-09-23T14:10:06","slug":"news-18961","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2024\/09\/23\/news-18961\/","title":{"rendered":"SpaceX, CNN, and The White House internal data allegedly published online. Is it real?"},"content":{"rendered":"\n<p>A cybercriminal has released internal data online that they say has come from leaks at several high-profile sources, including SpaceX, CNN, and the White House.<\/p>\n<p>However, there are some questions around the reliability and usefulness of the released data, so we took a closer look. <\/p>\n<p>When it comes to the the SpaceX data set, the poster is apparently not a big fan of Elon Musk.<\/p>\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"1238\" height=\"715\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/09\/BF_SpaceX.png\" alt=\"BreachForums post about SpaceX\" class=\"wp-image-117871\" \/><figcaption class=\"wp-element-caption\"><em>BreachForums post about SpaceX data<\/em><\/figcaption><\/figure>\n<p>Their post on data leak site BreachForums says:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cToday I present data from Spacex, because F*** you elon musk, thats why LOL<\/p>\n<p>The leak contains, Emails, Hashes, Numbers, Hosts, IP&#8217;s\u201d<\/p>\n<\/blockquote>\n<p>But looking at the data we spotted some strange looking entries.<\/p>\n<p>For example, by searching for Elon\u2019s email address we found all these:<\/p>\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"341\" height=\"655\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/09\/elonsmailboxes.png\" alt=\"collection of possible email addresses for Elon Musk at SpaceX\" class=\"wp-image-117872\" \/><figcaption class=\"wp-element-caption\"><em>Now I still don\u2019t know where to send the pitch for my brilliant Mars colonization idea.<\/em><\/figcaption><\/figure>\n<p>SpaceX has not acknowledged this data breach, and it doesn\u2019t seem likely that it will.<\/p>\n<p>Moving on to the White House data set, we also found something that looked odd while looking at the email addresses. A lot of them seem to be composed of German words followed by the @whitehouse.gov domain name.<\/p>\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"304\" height=\"347\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/09\/german_words.png\" alt=\"fabricated whitehouse.gov email addresses\" class=\"wp-image-117873\" \/><figcaption class=\"wp-element-caption\">Potentially fabricated whitehouse.gov email addresses<\/figcaption><\/figure>\n<p>Again, the breach claim has not been acknowledged, nor do we expect it to be.<\/p>\n<p>The same poster claims to have breached another company, Up North Pride, by impersonating a police officer:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cI sent them a fake data request from a law enforcement email, and they handed over what they had and this is what they handed over\u201d<\/p>\n<\/blockquote>\n<p>In this case, looking at the data, the email addresses of the partnering organizations at least look real.<\/p>\n<p>The motive of the cybercriminal for posting the way they did is unclear. Many of these posters are just looking for attention, potentially hoping to sell some of the data by getting their name out there. Or they are trying to annoy some of the people they don\u2019t like.<\/p>\n<p>For now, we wait and see, but it&#8217;s probably not worth giving it the time of day.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-check-your-digital-footprint\">Check your digital footprint<\/h2>\n<p>If you want to find out if your personal data was exposed through a data breach, you can use our&nbsp;<a href=\"https:\/\/www.malwarebytes.com\/digital-footprint\">free Digital Footprint scan<\/a>. Fill in the email address you\u2019re curious about (it\u2019s best to submit the one you use most frequently to sign up for sites and services) and we\u2019ll send you a free report.<\/p>\n<div class=\"wp-block-malware-bytes-button mb-button\" id=\"mb-button-7ba16f0b-04e8-4679-9512-2f21a0971dcf\">\n<div class=\"mb-button__row u-justify-content-center\">\n<div class=\"mb-button__item mb-button-item-0\">\n<p class=\"btn-main\"><a href=\"https:\/\/www.malwarebytes.com\/digital-footprint?utm_source=blog&amp;utm_medium=social&amp;utm_campaign=b2c_pro_acq_fy25dfplaunch_171269600960&amp;utm_content=V1\"><\/a><a href=\"https:\/\/www.malwarebytes.com\/digital-footprint\">SCAN NOW<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\" \/>\n<p><strong>We don&#8217;t just report on threats &#8211; we help safeguard your entire digital identity<\/strong><\/p>\n<p>Cybersecurity risks should never spread beyond a headline. Protect your\u2014and your family&#8217;s\u2014personal information by using <a href=\"https:\/\/www.malwarebytes.com\/identity-theft-protection\">identity protection<\/a>.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2024\/09\/spacex-cnn-and-the-white-house-internal-data-allegedly-published-online-is-it-real\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> A cybercriminal posted free data sets on the infamous BreachForums, but are these actually worth looking at?  <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[28039,8200,31931,32,14315,31932,153],"class_list":["post-25231","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-breachforums","tag-cnn","tag-l33tfg","tag-news","tag-spacex","tag-up-north-pride","tag-white-house"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=25231"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25231\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=25231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=25231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=25231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}