Brazil's Mobex Exposes Sensitive Data in Recent Breach

🏢 Company Overview

• Name: Mobex Telecom (Mobex.com.br)
• Industry: Telecommunications
• Location: São Paulo, Brazil
• Founded: 2010
• Key Services:
  • 0800 Services: Provides toll-free 0800 numbers for businesses in Brazil.
  • Voice Solutions: Offers various voice communication services tailored for corporate clients.
  • Cloud Solutions: Includes cloud-based telephony and communication services.
  • Support Services: Provides customer support and technical assistance for businesses.

About Mobex: Mobex Telecom has been a significant player in the Brazilian telecommunications industry, specializing in providing toll-free numbers (0800) and other voice services for businesses across the country. The company positions itself as a reliable partner for businesses looking to enhance their communication channels, offering quick setup and reliable service. The company is known for its cloud-based solutions that enable businesses to manage their voice communications efficiently and cost-effectively.

🔍 Breach Details

• Date of Breach Announcement: August 11, 2024
• Data Exposed:
  • Type of Data: Full database and website content
  • Database Details:
    • SQL Database: Included information managed through phpMyAdmin
    • Website Data: All content in the public_html directory, which typically contains the website’s source code, images, and other static assets.
  • Compressed Data: 675 MB
  • Uncompressed Data:
    • Database: 8.73 GB
    • Website Content: 14.5 GB
• Source of Leak: The data was posted on a notorious dark web forum by a user named "003", who claims to have full control over the data and is offering it for sale. The breach involves critical components of Mobex’s online infrastructure, suggesting that the attackers had deep access, potentially through a vulnerability in the server or administrative panels.
• Authentication: The threat actor provided sample files to prove the authenticity of the breach.

👤 Threat Actor Profile

• Alias: "003"
• Forum Details:
  • Reputation: 20 (indicating moderate activity and some level of trust within the community)
  • Posts: 9
  • Threads: 5
  • Joined: August 2024 (new user, possibly created this account solely for this breach)
• Contact Information: The actor is using Telegram for communication, indicating an attempt to maintain anonymity and direct control over negotiations for the data.

⚠️ Impact Analysis

• Data Integrity Risks:
  • Exposure of sensitive business information, including customer records, internal communications, and possibly financial data.
  • Potential manipulation or defacement of the website if attackers decide to exploit the vulnerabilities further.
• Customer Data Exposure:
  • If customer data is part of the leaked database, businesses using Mobex’s services could face significant risks, including identity theft and targeted phishing campaigns.
• Reputation Damage:
  • This breach could severely impact Mobex’s reputation, leading to a loss of trust among its client base, especially if sensitive client data is compromised.
• Operational Disruption:
  • The leak could lead to downtime, especially if critical files are tampered with or if the company needs to take its systems offline to mitigate the breach.