Abuse to Bitcoin address
1MXvdC3xU96FJMqHe6MX7oMhVYMeZ3KbYL

Ransomware

Abuser: get_base@tuta.io

get_base@tuta.io >>the most idiot hacker i've never seen

France, 2020-05-22 15:33:00

Ransomware

Abuser: get_base@tuta.io

Really stupid !! to believe that he does not want to be paid

France, 2020-05-22 15:34:58

Ransomware

Abuser: get_base@tuta.io

Mongodb hacking, stupid hacker

France, 2020-05-22 18:34:01

Ransomware

Abuser: get_base@tuta.io

ransomware mongodb

France, 2020-05-24 18:44:44

Ransomware

Abuser: restore_base@tuta.io

MongoDB hack

Germany, 2020-06-21 18:08:05

Ransomware

Abuser: restore_base@tuta.io

mongodb ransom

Belarus, 2020-06-22 07:57:03

Ransomware

Abuser: restore_base@tutanota.com

We have a mongoDB that we leave open as a honey pot. It gets hit often. Here is what was left: { "_id" : ObjectId("5ee09f8eea4a2d1c206c90fb"), "content" : "All your data is a backed up. You must pay 0.015 BTC to 1MXvdC3xU96FJMqHe6MX7oMhVYMeZ3KbYL 48 hours for recover it. After 48 hours expiration we will leaked and exposed all your data. In case of refusal to pay, we will contact the General Data Protection Regulation, GDPR and notify them that you store user data in an open form and is not safe. Under the rules of the law, you face a heavy fine or arrest and your base dump will be dropped from our server! You can buy bitcoin here, does not take much time to buy https://localbitcoins.com with this guide https://localbitcoins.com/guides/how-to-buy-bitcoins After paying write to me in the mail with your DB IP: restore_base@tutanota.com\n" }

United Kingdom, 2020-06-25 12:30:45

Ransomware

Abuser: Restore_base@tuta.io

MongoDB - was only used for tests with dummy info. Same message as above

Israel, 2020-06-30 14:09:52

Ransomware

Abuser: restore_base@tuta.io

Same email but different wallet. MongoDB wiped. Only the ransom readme was left. Impacted environment was legacy develop. so nice try kiddo.

Slovakia, 2020-07-01 08:23:20

Darknet market

Abuser: wangguogangxxx@163.com

mongodb is attacked and this address is need pay 0.1BTC to recover our data

China, 2020-07-01 09:47:01

Ransomware

Abuser: restore_base@tuta.io

Mongodb ransomware asking for 0.015 btc

United Kingdom, 2020-08-09 17:15:18

Ransomware

Abuser: restore_base@tuta.io

The database contained a handful of documents, nothing that special or sensitive whatsoever. Dear hacker-dude: we had a dump, not a single document lost, nice try :)

Italy, 2020-08-11 15:07:55