Israeli Domain Registrar Galcomm Data Allegedly Leaked

An attacker has reportedly published data allegedly belonging to Galcomm, a prominent Israeli domain registrar. Cyber News - Erez Dasa reports that this information appears to have been exfiltrated directly from Galcomm’s website. The full scope and sensitivity of the exposed data remain unclear, and there’s a possibility it could be outdated or recycled from previous incidents.

While the direct impact isn’t fully assessed, any data leak from a domain registrar is a significant concern. Such entities hold critical information including registrant details, technical contacts, and potentially even administrative credentials for domain management. Attackers could leverage this data for further phishing campaigns, domain hijacking attempts, or to map out an organization’s digital footprint for future attacks.

Defenders need to assume this data is now in circulation. Even if ‘old,’ it can still fuel social engineering or credential stuffing against users who haven’t rotated passwords. CISOs should be scrutinizing any new influx of phishing attempts targeting their organizations, particularly those seemingly tailored with domain-specific information.