Stephen Miller retweeted
Jun 14
🚨 CYBER INTELLIGENCE ALERT: 🇪🇸 [UNCONFIRMED] ALLEGED TELECOMMUNICATIONS CUSTOMER BREAK — NETLLAR GROUP (MASORANGE)
[STATUS: UNCONFIRMED / VISIBLE EVIDENCE]
A recent post has been detected on underground cybersecurity forums, issued by the threat actor calling himself "fuerzayhonor," claiming to have perpetrated a massive data breach against the Netllar Group in Spain. According to the attacker, the provider's infrastructure had never been compromised before, thus classifying the information as entirely new.
The actor claims that the data breach not only directly affects Netllar users, but also includes customer databases belonging to other subsidiaries and brands operating under the same network and agreements:
Netllar
Oceans
Octel
Europanetwork
📂 Data Dump Details and Exposed Data Schema (PII)
Threat Actor: fuerzayhonor
Volume: More than 50,000 unique customer records.
Structured Data Schema (Sample Validation):
Upon verifying the raw sample provided by the attacker, it was found that the records expose high-fidelity Personally Identifiable Information (PII) fields corresponding to individuals and legal entities primarily located in the regions of Alicante, Valencia, Madrid, and Almería (Spain). The form explicitly includes:
Full Name: Names and surnames of the account holders, along with the company name if applicable.
National Identification Number: The DNI/NIF/NIE number (essential tax identification numbers in Spain, ending with their respective letter control code).
Residential Geolocation: Complete home addresses specifying streets, avenues, housing developments, building numbers, floors, postal codes, and corresponding municipalities.
Active Contact Data: Personal, business, and official corporate email addresses (e.g., @hotmail.com, @gmail.com accounts, as well as banking and sector-specific emails like @bbva.com or @ubs.com), accompanied by their respective landline or mobile contact numbers.
⚠️ Risk and Tactical Impact Considerations
Targeted Smishing and Vishing Campaigns: Breaches at telephone companies and ISPs in Spain are immediately exploited by local fraud rings. Armed with the victim's name, national ID number (DNI), address, and the specific fiber/mobile service provider (e.g., Netllar/Oceans), attackers execute the classic "double-call scam" or mobile number portability fraud. They call pretending to be from the provider (e.g., Netllar) to announce a fake rate hike; hours later, a fraudulent entity contacts the victim with a "counter-offer," stealing their banking details in the process.
Account Takeover (SIM Swapping): Although the sample displays customer profile data, if the full data dump includes SIM card ICCID numbers or mobile contract details, there is an exponentially higher risk of threat actors attempting SIM swaps to intercept SMS verification codes and compromise bank accounts.
🛡️ Recommended Actions (Defensive and Investigative)
Hardening Customer Authentication Processes: Instruct fraud departments handling Spanish user bases to tighten identity validation filters. Following this breach, verification based solely on name and national ID (DNI) should no longer be considered a secure or sufficient factor for authorizing critical account changes or transfers, as this data is now compromised. Credential Reuse Audit: Advise organizations using the email addresses found in the sample to proactively change their passwords, given the risk that attackers might use the extracted combinations for credential stuffing attacks against other platforms.
VECERT TOOLS
Strategic Monitoring Tools & Intelligence Platform:
🌐 analyzer.vecert.io
Security Verification & Monitoring:
🛡️ monitor.vecert.io
#CyberSecurity 🔐 #Spain 🇪🇸 #Netllar #MasOrange #DataBreach 📁 #PII #DNI #FinancialInvestigation 💸 #ThreatIntelligence 📊 #StrengthAndHonor #VECERT 🏢
3
5
1,990
May 19
Ya sabemos que estaba mirando Florentino 🕵️♂️
Estaba contratando @Netllar para asegurarse de que lleguen los mails al comité de árbitros 🤣
✅ velocidadgamer.es
5
10
1,652
May 12
Llega el buen tiempo, tienes que estar bien conectado con los tuyos y que mejor forma de hacerlo que con @Netllar 🛜
Linea móvil con 100GB acumulables llamadas ilimitadas por solo 9,90€ 📲
Y si lo contratas te llevas un pack de Oxygen Gaming 💙
✅ velocidadgamer.es
2
4
345
Apr 30
Porque siempre tienes que quedarte en las mejores manos, con los que nunca te fallan. Por eso elegimos Netllar 📶
Además tienes un ofertón que no puedes dejar pasar:
📢 FIBRA DE 600MB POR 19,90€ DURANTE 12 MESES 1 PACK DE OXYGEN GAMING
✅ velocidadgamer.es
6
9
1,642
Apr 21
¿Cuanto sabe la gente de Internet? 🕵️♂️📶
De la mano de @Netllar salimos con @Donperilla_ a poner en apuros a la gente.
4
9
614
Apr 10
¡En @Netllar siempre te acompañan en los mejores momentos de tu vida y por eso te traen este pedazo de oferta! 📶
📢 FIBRA DE 600MB POR 19,90€ DURANTE 12 MESES
Además te llevas un PACK SORPRESA de Oxygen Gaming 💙
✅ velocidadgamer.es
2
6
462
Mar 19
¿Cuál ha sido el peor momento en el que se te ha caído internet? 📶
Esto no os ocurriría si estuvieseis en el barco de @Netllar, tú compañía de confianza 🏠
Gracias a todas las personas que participaron, sois geniales 💙
✅ velocidadgamer.es
3
7
1,049
Mar 12
En @Netllar son muy familiares y por eso os traen una tarifa espectacular para tenerla en casa 🏠
🛜 FIBRA DE 600MB POR 19,90€ DURANTE 12 MESES 🛜
Además te llevas un PACK SORPRESA de Oxygen Gaming 💙
✅ velocidadgamer.es
#fibra #internet #ad
5
11
1,039
Jan 28
Os he escrito MD, se que llegó tardísimo pero espero que no sea lo suficientemente tarde🥲
2
54
Vamos a convertir una región de viejos en la autopista del amor♥️
1
2
37
Jan 23
¡LO PEDISTEIS Y AQUÍ ESTÁ LA #OXYGENCUP3! 🏆
🟢 Randomlocke de Pokémon Platino
🆚 Dos semanas de contenido
👑 Más premios
📅 15 de febrero
🚀 @Netllar | @mygamesir
Si eres creador/a de contenido y quieres participar, contáctanos por MD, nos vemos en Sinnoh 📩
#HungryForSuccess
12
13
34
9,814