Actor claims to sell 300K records from UAE's UPC World Trading
A threat actor on an underground forum claims to sell a database of more than 300,000 customer records from UPC World Trading, a UAE company selling office equipment, copiers and IT support services. The listing allegedly includes names, emails, phone numbers and physical addresses, priced at $400 with forum escrow. The claim is unverified and UPC World has not confirmed an incident; teams should watch for invoice fraud and supplier-impersonation phishing risks.
What happened
A threat actor on an underground forum claims to sell a database of more than 300,000 customer records from UPC World Trading, a UAE office equipment and IT support company. The asking price is $400, with forum escrow offered. The claim is unverified and the company has not confirmed an incident.
Why it matters
If authentic, the exposure covers business customer contacts: names, emails, phone numbers and physical addresses. According to DailyDarkWeb, such data could support invoice fraud and supplier-impersonation phishing. There is no confirmed breach at this time.
What to do
Monitor threat intelligence channels for confirmation or database samples. Check whether the company has any relationship with UPC World and alert procurement and finance teams about invoice fraud attempts involving these contacts.
For the technical team
- Affected
- Base de clientes da UPC World Trading L.L.C., empresa dos Emirados Árabes Unidos de equipamentos de escritório, copiador · Customer database of UPC World Trading L.L.C. allegedly affected. No specific system, product or version cited.
- Exploitation
- No confirmed exploitation. Alleged sale reported by DailyDarkWeb: the captured post shows the price and company logo but no sample or field list, so volume and contents cannot be confirmed. Claim not independently verified.
- Fix
- No fix applicable. No vulnerability, product or affected version identified.
- Vector
- No technical vector described in the sources. The origin is a sale claim on an underground forum; there is no information on how the database was allegedly obtained.
- More details
- Alleged volume: more than 300,000 records (customer names, emails, phone numbers, physical addresses). Asking price: $400, with forum escrow offered. UPC World has not confirmed an incident. Potential use cited by DailyDarkWeb's analyst: invoice fraud and supplier-impersonation phishing.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
