Recently a hacking Group named ” claimed on Twitter that, they have stolen $100,000 by leveraging user names and passwords taken from a(Sebastiancorp.com)to access victims’ bank accounts. Using a. SQL injection attack against the California ISP Sebastian to access their customers’ database includes e-mail addresses, user names. and clear text passwords. Using this technique, hackers can. determine the structure and location of key databases and can download the database or compromise the database server. The attack is successful only when the web application is not sufficiently secured.
Source: https://thehackernews.com/2013/10/hacker-stole-100000-from-users-of.html