A group of cybercriminals has leaked almost 39,000 printable tickets for 150 upcoming concerts and events, including performances by Pearl Jam, Phish, Tate McRae, and Foo Fighters. The perpetrators of the massive leak are a group of cybercriminals known as “Sp1d3rHunters”, who have been selling stolen data from attacks on Snowflake accounts.
Since April, criminals have been downloading databases from Snowflake belonging to at least 165 organizations, using credentials stolen by specialized malware. In May, ShinyHunters, another known group of cybercriminals, started selling data allegedly belonging to 560 million Ticketmaster customers, claiming that the data had been obtained from Snowflake. Ticketmaster later confirmed the security breach in their Snowflake account.
The cybercriminals initially demanded a payment of $500,000 from Ticketmaster to prevent the data leak. However, a week ago, they leaked 166,000 barcodes for Taylor Swift concert tickets and increased the extortion amount to over $2 million.
Ticketmaster assured the public that their anti-fraud measures make leaked data useless, since their unique mobile barcodes are constantly updated. “Ticketmaster’s SafeTix technology protects tickets by automatically updating a new and unique barcode every few seconds, so it cannot be stolen or copied,” Ticketmaster explained to the BleepingComputer website.
However, Sp1d3rHunters claims that printable tickets have non-rotatable barcodes. “Ticketmaster is lying to the public and saying that the leaked barcodes cannot be used. The ticket database includes both physical and online ticket types,” wrote the threat author in a hackers forum.
The post included a link to a CSV file with the data of 38,745 TicketFast entries, Ticketmaster’s service for printing tickets at home. A review by BleepingComputer confirmed that the data corresponded to 154 events, including concerts by Aerosmith, Bruce Springsteen, Cirque du Soleil, Foo Fighters, Metallica, Red Hot Chili Peppers, and Sting. The cybercriminals also provided a guide for converting the leaked data into scannable barcodes, allowing would-be criminals to create tickets using TicketFast templates.
Source: BleepingComputer
