Bulba Hackers is&nbsp;a&nbsp;Belarusian computer and information security community. Our teammates participate in&nbsp;Capture The Flag competitions, speak at&nbsp;meetups, conduct security research and promote the advancement of&nbsp;cybersecurity in&nbsp;the Republic of&nbsp;Belarus. Among our members are students who are just starting their journey in&nbsp;information security, as&nbsp;well as&nbsp;certified professionals in&nbsp;offensive security. In&nbsp;addition to&nbsp;infosec specialists, our community includes programmers, hardware enthusiasts, bug hunters and other creative individuals.

flag-belarus.svg

large_Bulba_hackers_logo - Сергей Краснояров.png

medium_Bulba_hackers_logo - Сергей Краснояров.png

small_Bulba_hackers_logo - Сергей Краснояров.png

thumbnail_Bulba_hackers_logo - Сергей Краснояров.png

Bulba_hackers_logo - Сергей Краснояров.png

Bulba Hackers

International cyberexercises in information security
Top-notch researchers test how well the virtual State F's infrastructure is protected.

Standoff 11

Top-notch researchers test how well the virtual State F's infrastructure is protected.

Top-notch researchers tested how&nbsp;well the&nbsp;virtual State&nbsp;F's infrastructure was&nbsp;protected.

Top-notch researchers test how well the virtual State&nbsp;F's infrastructure is protected.

What's new?

 Innostage SOC tour

Meet the red teams

Сильнейшие исследователи проверяют защищенность IT-систем виртуального Государства F.

Сильнейшие исследователи проверили защищенность IT-систем виртуального Государства&nbsp;F.

Сильнейшие исследователи проверяют защищенность IT-систем виртуального Государства&nbsp;F.

Standoff 11 идет полным ходом

Standoff 11: international cyber­exercises in information security

Day one results

Day two results

Cyberbattle overview: Part I

Cyberbattle overview: Part II

Day three results

Cyberbattle overview: Part III

Cyberbattle final results

Cyberbattle overview: Part IV

Hackers found a flaw in a mobile bank app: on the server side, there was no check for whether the account to be used for payment belonged to an authorized user. The hackers exploited the flaw to make purchases in online shops using their victims' accounts. Around ₽20 million was stolen in total. 
The affected clients have already filed lawsuits against the bank. The bank can compensate the damage to its clients, but that won't help to restore its reputation.

Cybercriminals hacked a merchant portal, which gave them access to the personal account of a shop chain on the bank's side. Using the account, they changed prices so that expensive items could be bought for next to nothing while cheap goods became unaffordable. The hackers also generated QR codes to sell illicit goods. 
The bank's reputation has been severely damaged. The bank will also have to pay an enormous fine.

A database with information about the bank accounts of legal entities in State F was put up for sale on the dark web. The text fragment of the database contains the names, phone numbers, passport data, and transaction details of company representatives.

Our source claims that the database is operational, and the Commercial Bank of the Standoff itself is carrying out an investigation. The cybercriminals gained access to the DBMS of the automated banking system, then unloaded the data stored there to their own servers. The scale of the consequences is still anyone's guess, but customers are already filing lawsuits and turning to competitors in the hope that their data will be safe there.

A database with Global Digital Bank card details was put up for sale by hackers. A database fragment published on the hackers' website contains details of 50 cards; all cards are valid and have funds on them. 
Meanwhile, the bank's clients are closing their accounts and turning to competitors in the hope that their data will be safe there.

Cybercriminals hacked the servers of a plastic surgery clinic located in the capital and stole terabytes of data, including photos of celebrity clients from various angles. The blackmailers threatened to put the sensitive data on the internet if their demands are not met. To prove their intentions, they took control over the clinic's office computer and sent several photos to the Daily STF magazine. None of the images matched Google search results, which means they originate from a private source.

Dozens of celebrities and regular citizens have already took legal action. The clinic is facing huge fines.

Triggered events