Search: “hertz”

14 stories

Dark web service Nexus sells scans of 153M+ US and Canadian drivers licenses, apparently siphoned from a breached identity verification company; FBI opened an inquiry.

A new dark web identity theft service called Nexus, advertised on the Exploit forum, offers scans of more than 153 million drivers licenses from the US and Canada, plus over 10 million ID cards and millions of travel and medical documents. The data appears to come from an ongoing breach at a major Louisiana-based identity verification company, with records growing by roughly 400,000 in 24 hours. Records include high-ranking US officials such as Defense Secretary Pete Hegseth, and timestamps suggest data was captured during car rentals and travel. The FBI's New Orleans field office has launched an official inquiry into the source of the images.

Krebs on SecuritySep 1, 22:40 UTC · 15d agoData breach in the wild1

I rented a car, and within hours, my driver's license was for sale

Dark-web site Nexus is selling about 153 million driver's license scans, apparently harvested near real time from IDScan.net's service used by Hertz and others.

KrebsOnSecurity reported that the dark-web marketplace Nexus offered roughly 153 million driver's license scans for sale, including the author's license shortly after it was scanned at a car rental. New scans appeared within hours to a day of presentation, implying near real-time access to data flowing through IDScan.net's ID scanning service, which lists Hertz and 11 other companies as customers and captures infrared and ultraviolet spectra. License listings grew by about 400,000 over 24 hours, indicating the leak was ongoing. Nexus went dark hours after the report, and the FBI is investigating.

Ars Technica · SecuritySep 2, 20:32 UTC · 14d agoData breach1

Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

Security AffairsMar 30, 13:14 UTC · Mar 30, 2025Ransomware in the wildCVE-2024-50623

The Present and Future of TV Surveillance

Schneier on SecurityAug 27, 11:08 UTC · Aug 27, 2024Ransomware

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Microsoft warns of Teams IT-impersonation intrusions deploying Node.js implants; Spring Ring vishing hit 150+ employees across 10 companies; The Gentlemen ransomware claims 683 victims.

Microsoft warned of a human-operated campaign abusing Teams external collaboration to impersonate IT help desk staff, deploy malicious MSI packages staging Node.js runtimes and obfuscated JavaScript implants, then pivot to domain controllers over WinRM. Unit 42 documented the Spring Ring vishing operation targeting over 150 employees across at least 10 companies using 26 attacker identities, including an NTLM relay variant against domain controllers. Sophos reported The Gentlemen ransomware (Gold Sherwood) reached 683 total victims by end of July 2026, adding 169 in July, with a playbook using BYOVD-based EDR killers and backup tampering. Group-IB found the Outsider phishing-as-a-service platform created 700+ new phishing pages within a month despite law enforcement takedowns.