EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

Hackers demand 3 million Monero ransom after Revolut data breach

2026-09-18 08:25:33
Bookmark

黑客组织“iamnotavillain”向Revolut勒索300万美元

据媒体报道,自称“iamnotavillain”的黑客组织已公开要求金融服务公司Revolut支付300万美元的赎金,货币种类为隐私币门罗币(Monero)。该组织威胁称,如果这家总部位于伦敦的金融科技公司不付款,他们将在24小时内出售窃取的客户数据。

9月16日(星期三),该组织在一个暗网网站上发布了这一要求。此举发生在Revolut确认发生数据泄露事件后的几天内,此次泄露导致约680名欧洲客户的身份证明文件等信息外流。

攻击者如何获取Revolut数据

意大利检察官表示,攻击者利用了一个属于意大利雷焦卡拉布里亚省政府的被入侵机构电子邮件账户,从而提交了看似来自政府机构的请求,进而获取了相关记录。

Revolut上周确认了这一事件,并指出客户资金未受影响,但身份证明文件、出生日期和联系方式等敏感信息已被暴露。该公司此前详细描述了这起伪造政府请求以窃取客户信息的案件,称这是一起精心策划的外部冒充诈骗行为。

目前,调查人员仍在努力确定发出这些请求的机构电子邮件账户是被渗透还是被克隆,以此评估该行动的准备程度之周密。

公开索要300万美元门罗币

According to the Financial Times, the group contacted it through Telegram and asked Revolut to transfer "6,000 XMR / 3,000,000" or it would "sell all the data and you will have blood on your hands." XMR is the transaction code for Monero, a privacy coin commonly used for illegal activities because its transactions are difficult to track.

The hacker claimed to have 147GB of data, including passports, driver's licenses, identification documents and photos. They threatened to sell the materials to other criminal organizations if payment was not received within 24 hours.

The Financial Times points out that it is uncommon to publish extortion requests publicly because extortion attempts are usually initially carried out privately and are only made public when the target refuses to negotiate.

Prosecutors and regulators respond

It is reported that the Italian National Anti-Mafia and Counter-Terrorism Bureau is handling the case, and prosecutors in Reggio Calabria are considering charging charges of hacking into public interest information systems. Investigators said the operation appeared to have lasted for months and were still determining whether the provincial government or the Italian Ministry of the Interior's computers were compromised.

Italian data protection authorities have initiated inspections and contacted their counterparts in Lithuania because Revolut's registered office is located in Lithuania.

This incident is one of a series of recent attacks that use government data requests to access private customer records, including the recent Trezor customer data breach.

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP