🇿🇦 South Africa: Webafrica Customer Database Allegedly Advertised for Sale
* Threat actor claims to be offering data allegedly sourced from Webafrica, a South African internet service provider
* The listing advertises approximately 742,000 records containing customer, subscription, and support-related information
* According to the seller, the dataset is organized into three primary categories:
* Customer contact records
* Internet service subscription information
* Customer support case data
* Allegedly exposed customer information includes:
* Full names
* Dates of birth
* Email addresses
* Mobile and landline phone numbers
* Physical and mailing addresses
* Postal codes
* Customer segmentation details
* Language preferences
* Account tier information
* Marketing preferences
* Login activity
* Assigned account managers
* Contact scores and lifecycle status
* The subscription dataset reportedly contains:
* Subscription identifiers
* Service plan information
* Activation and expiration dates
* Monthly fees
* Payment methods
* Outstanding balances
* Contract durations
* Data usage statistics
* Internet speed tiers
* Installation dates
* Service provider information
* Account management details
* Service termination reasons
* The support case section allegedly includes:
* Customer support tickets
* Issue descriptions and categories
* Resolution notes
* Assigned support personnel
* Escalation levels
* SLA deadlines
* Customer satisfaction scores
* Interaction histories
* Follow-up records
* Internal support notes
* The threat actor is advertising the dataset as containing customer communications, subscription records, and support case information from the organization
* At the time of reporting, Daily Dark Web has not independently verified the authenticity of the dataset or the claims made by the threat actor
Analyst Note:
Telecommunications and ISP datasets are particularly valuable because they combine identity information, billing records, service usage data, and customer support interactions. If authentic, such information could facilitate highly targeted phishing campaigns, SIM-swap preparation, account takeover attempts, customer impersonation, and business email compromise operations against both customers and employees.
#DDW #Intelligence #Webafrica #DarkWeb