386 million user records stolen in data breaches — and they're being given away for free
386 million user records stolen in data breaches — and they're being given away for free
A notorious hacker or group of hackers is giving away copies of databases said to incorporate 386 one thousand thousand user records, after posting links to the databases on a market used by cybercriminals.
The threat role player, who goes by the proper noun ShinyHunters, claims to accept data stolen from xviii dissimilar websites in the past seven months.
- The best antivirus software to keep yous and your devices safe
- VPN: add an extra layer of security with a virtual private network
- Just In: OnePlus Nord already has a big display problem
Free for all
According to BleepingComputer, ShinyHungers terminal week began uploading the databases to a forum where anyone can download them free of accuse.
ShinyHunters is believed to take played a role in loftier-profile data breaches at HomeChef, Promo.com, Mathway, Chatbooks, Dave.com, Wattpad and fifty-fifty Microsoft'south GitHub account. Many of these records were previously offered for auction online.
The complimentary data is said to come up from the following companies, some of which have confirmed data breaches in the past few months.
- Appen.com - 5.8 one thousand thousand records
- Chatbooks.com - 15.eight million records
- Dave.com - 7 meg records
- Drizly.com - 2.4 1000000 records
- GGumim.co.kr - ii.4 million records
- Havenly.com - i.three million records
- Hurb.com - xx million records
- Indabamusic.com - 475,000 records
- Ivoy.mx - 127,000 records
- Mathway - 25.8 million records
- Proctoru.com - 444,000 records
- Promo.com - 22 million records
- Rewards1.com - 3 million records
- Scentbird.com - 5.8 million records
- Swvl.com - four million records
- Truefire.com.com - 602,000 records
- Vakinha.com.br - 4.8 million records
- Wattpad - 270 million records
The declared information breaches at Appen.com, Drizly.com, Havenly.com, IndabaMusic.com, Ivoy.mx, Proctoru.com, Rewards1.com, Scentbird.com and Vakinha.com.br had not been reported before, noted BleepingComputer.
The real deal
After he viewed some of these databases, BleepingComputer's Lawrence Abrams believes that the data is indeed legitimate because "the exposed e-mail addresses stand for to accounts on the services".
ShinyHunters has likely fabricated a large sum of money by selling this data online. The cheapest databases were offered for $500 (Zoosk), while the most valuable was listed at $100,000 (WattPad).
ShinyHunters explained to BleepingComputer why he, she or they are giving away the data.
"I just thought: 'I've made enough coin now' so I leaked for everyone'due south benefit. Obviously, some people are a trivial upset because they paid resellers a few days ago, simply I don't care."
Jake Moore, security specialist at ESET, told Tom's Guide: "Even stolen information has a best-earlier appointment, and then this isn't a huge surprise for some of this data to be offered for gratis in one case it has been out in the public domain for some time.
"However, what is interesting is that one-half of those breaches take not before since been disclosed, which makes it an interesting move past the hackers [who] possibly genuinely only wanted to make a sure amount from the stolen information."
What to do if you were affected
For affected users, Moore recommends: "It goes without saying to make sure that if you have an account with whatever of the listed compromised services so make sure yous change your password and where available, activate 2-factor authentication equally an extra layer of protection."
Daniel Lewis, CEO and co-founder of cybersecurity business firm Awen Collective, added: "Nosotros recommend that everybody, including those people using the Dave service, to check whether their details have been compromised by plugging their electronic mail address into the HaveIBeenPwned website." (It'southward safe to use.)
Tom's Guide would also advise that everyone employ one of the best countersign managers so that a breach involving one of your accounts doesn't end upwards involving all of your accounts.
- More: Stay bearding without the spend with a cheap VPN
Source: https://www.tomsguide.com/news/shinyhunters-breach-giveaway
Posted by: howellbeir1960.blogspot.com
0 Response to "386 million user records stolen in data breaches — and they're being given away for free"
Post a Comment