BSSN Tries to Find a Trace of Bjorka Hacker Threats
- Breached
VIVA – The National Cyber and Crypto Agency (BSSN) team conveyed that they tries to find a trace of Threat Actor Bjorka on the deep web Breached.to on November 15, 2022, at 1.42 PM in West Indonesia Time. BSSN found out about the sale of 3.2 billion PeduliLindungi user data.
BSSN spokesman, Ariandi Putra said that BSSN together with the Ministry of Health (Kemenkes), the Ministry of Communication and Information Technology (Kominfo), and PT Telkom coordinated and then, investigated.Â
"The investigation was carried out before confirming the alleged data leakage of PeduliLindungi application users," BSSN Spokesperson, Ariandi Putra stated in the official release on November 18, 2022.
The technical steps taken include validating the data published by the Threat Actor with the data in the PeduliLindungi application, acquiring firewall logs, imaging virtual machines, and application snapshots on the PeduliLindungi application server.Â
Data pribadi diduga milik Deddy Corbuzier disebar Bjorka.
- Breached
"Until now, these processes are still ongoing," Ariandi Putra remarked.
Still from BSSN's statement, they found that Bjorka provided 40 data sample records and sold the data for US$100,000 (Rp1.5 billion) in bitcoin.Â
Bjorka hacker claims to have 3,250,144,777 with a size of 157GB with data in the form of vaccination data, check-in history data, and contact tracing the history of PeduliLindungi application users.
Bjorka also claims that in the data sample there is data on the Minister of Communication and Information Technology (Kominfo) Johnny G Plate, Coordinating Minister for Maritime Affairs and Investment, Luhut Binsar Pandjaitan, and Deddy Corbuzier.
In the data sample, Deddy Corbuzier's name is written as Deddy Cahyadi. The 45-year-old YouTuber is known to have the real name Deodatus Andreas Deddy Cahyadi Sunjoyo. But the authenticity of the data is still unknown.
Previously, Bjorka hacker sold data on 44 million MyPertamina accounts on the same forum. The total number of files sold was 44,237,264 with a total of 6GB compressed and 30GB uncompressed data.
The leaked data includes name, email, population identification number (NIK), Taxpayer Identification Number (NPWP), phone number, address, place of birth, gender, income (daily, monthly, yearly), and so on.
