article thumbnail

Open Subtitles breach: The dangers of password reuse

Malwarebytes

The impact so far: almost seven million accounts “breached and ransomed” back in August. New breach: Open Subtitles had almost 7M accounts breached and ransomed in Aug. Data included email and IP addresses, usernames and unsalted MD5 password hashes. This one falls under the familiar banner of “password reuse is bad”.

article thumbnail

Sharing Netflix, Disney+, other passwords is illegal, according to new guidance

Malwarebytes

What's noteworthy— as TorrentFreak pointed out —is that the UK now flags password sharing , a most talked-about issue in the realm of streaming services, as piracy. Under Section 11 of the Fraud Act of 2006 in the UK, someone using "services of a members' club without paying and without being a member" is considered fraud.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

That same email address also is tied to two forum accounts for a user with the handle “ O.R.Z.” user account — this one on Verified[.]ru Prior to that, akafitis@gmail.com was used as the email address for the account “ Fitis ,” which was active on Exploit between September 2006 and May 2007.

Malware 239
article thumbnail

$10M Is Yours If You Can Get This Guy to Leave Russia

Krebs on Security

” That handle used the same ICQ instant messenger account number ( 555724 ) as a Mazafaka denizen named “ Nordex.” ” In February 2005, Nordex posted to Mazafaka that he was in the market for hacked bank accounts, and offered 50 percent of the take. In 2017, U.S. Constella tracked another Bankir[.]com

Marketing 232
article thumbnail

OpenSubtitles data breach impacted 7 million subscribers

Security Affairs

Exposed data include email and IP addresses, usernames, the country of the user and passwords stored as unsalted MD5 hashes. The hack is the result of poor cyber security since its launch in 2006, administrator OSS said. Subscribers are recommended to change opensubtitles.org and opensubtitles.com and forum password.

article thumbnail

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks

Krebs on Security

Kislitsin is accused of hacking into the now-defunct social networking site Formspring in 2012, and conspiring with another Russian man convicted of stealing tens of millions of usernames and passwords from LinkedIn and Dropbox that same year. Nikulin is currently serving a seven-year sentence in the U.S. prison system.

article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

Cyber intelligence firm Intel 471 reports that obelisk57@gmail.com was used to register an account on the forum Blacksoftware under the nickname “ Kerens.” One of the domains registered in 2006 to the address unforgiven57@mail.ru frequently relied on the somewhat unique password, “ plk139t51z.”

Malware 216