Nearly 71 million unique credentials stolen for logging into websites such as Facebook, Roblox, eBay, and Yahoo have been circulating on the Internet for at least four months, a researcher said Wednesday.
breach notification service, said the massive amount of data was posted to a well-known underground market that brokers sales of compromised credentials.
Hunt said he often pays little attention to dumps like these because they simply compile and repackage previously published passwords taken in earlier campaigns.
This isn’t just the usual collection of repurposed lists wrapped up with a brand-new bow on it and passed off as the next big thing; it’s a significant volume of new data.
When you look at the above forum post the data accompanied, the reason why becomes clear: it’s from ‘stealer logs’ or in other words, malware that has grabbed credentials from compromised machines.”
For added assurance, Hunt also checked a sample of the credentials to see if the email addresses were associated with accounts on the affected websites.
The original article contains 645 words, the summary contains 167 words. Saved 74%. I’m a bot and I’m open source!
This is the best summary I could come up with:
Nearly 71 million unique credentials stolen for logging into websites such as Facebook, Roblox, eBay, and Yahoo have been circulating on the Internet for at least four months, a researcher said Wednesday.
breach notification service, said the massive amount of data was posted to a well-known underground market that brokers sales of compromised credentials.
Hunt said he often pays little attention to dumps like these because they simply compile and repackage previously published passwords taken in earlier campaigns.
This isn’t just the usual collection of repurposed lists wrapped up with a brand-new bow on it and passed off as the next big thing; it’s a significant volume of new data.
When you look at the above forum post the data accompanied, the reason why becomes clear: it’s from ‘stealer logs’ or in other words, malware that has grabbed credentials from compromised machines.”
For added assurance, Hunt also checked a sample of the credentials to see if the email addresses were associated with accounts on the affected websites.
The original article contains 645 words, the summary contains 167 words. Saved 74%. I’m a bot and I’m open source!