Troy Hunt

DECEMBER 20, 2017

Over the course of this week, I've been writing about "Fixing Data Breaches" which focuses on actionable steps that can be taken to reduce the prevalence and the impact of these incidents. Let's move on and talk about why this makes a lot of sense when it comes to fixing data breaches.

Data breaches 119

Data breaches Marketing Penetration Testing Government 119

Krebs on Security

DECEMBER 3, 2021

More commonly, that access is purchased from a cybercriminal broker who specializes in acquiring remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network. The username associated with that account was “ bo3dom.” com back in 2011, and sanjulianhotels[.]com

Ransomware 296

Ransomware Passwords Accountability Cybercrime 296

Security Affairs

FEBRUARY 11, 2019

620 million accounts stolen from 16 hacked websites (Dubsmash, Armor Games, 500px, Whitepages, ShareThis) available for sale on the dark web. The Register revealed in exclusive that some 617 million online account details stolen from 16 hacked websites are available for sale on the dark web. “I need the money. Pierluigi Paganini.

Accountability 93

Accountability Hacking Advertising Data breaches 93

Security Affairs

JULY 11, 2020

The Russian hacker Yevgeniy Nikulin found guilty for LinkedIn, Dropbox, and Formspring data breach back in 2012 and the sale of their users’ data. The Russian man stole roughly 117 million user records, including usernames, passwords, and emails.

Hacking 79

Hacking Cybercrime Data breaches Advertising 79

Krebs on Security

JANUARY 8, 2024

Collectively in control over millions of spam-spewing zombies, those botmasters also continuously harvested passwords and other data from infected machines. KrebsOnSecurity began researching Icamis’s real-life identity in 2012, but failed to revisit any of that research until recently. bank accounts.

Cybercrime 209

Cybercrime Banking Computers and Electronics DDOS 209

Krebs on Security

JULY 18, 2023

com , a service that sold access to billions of passwords and other data exposed in countless data breaches. LeakedSource was advertised on a number of popular cybercrime forums as a service that could help hackers break into valuable or high-profile accounts. An administrator account Xerx3s on Abusewithus.

Hacking 192

Hacking Accountability Data breaches Marketing 192

Malwarebytes

JUNE 30, 2021

Note that account credentials and banking details don’t appear to be part of the proof. This suggests that the data was scraped rather than breached. Scraping happens when somebody uses a computer program to pull public data from a website, using the website in a way it wasn’t intended to be used.

Data breaches 145

Data breaches Accountability VPN Scams 145

SecureWorld News

MARCH 24, 2022

Now, headlines about ransomware, cyberattacks, and data breaches pour into social media feeds as steady as a river flows. SecureWorld News takes a look at some of the largest data breaches to ever occur. Top 10 most significant data breaches. Yahoo data breach (2013). Who attacked: no attacker.

Data breaches 117

Data breaches Passwords Accountability Government 117

Krebs on Security

JUNE 25, 2019

An online search for the term “yehuo” reveals an account on the Chinese Software Developer Network which uses that same nickname and references the domain blazefire[.]com. com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., 2333youxi[.]com blazefire[.]com

Mobile 247

Mobile Technology Manufacturing Malware 247

Malwarebytes

JANUARY 16, 2024

Together, CWRU and the FBI were able to identify that an IP address with which the malware was communicating had also been used to access the alumni email account of a man called Phillip Durachinsky. In 2012, as a senior soon to graduate with a physics degree, he worked on a project with faculty member Robert W.

Malware 83

Malware Passwords Identity Theft Data collection 83

Spinone

NOVEMBER 30, 2018

There have been some very high profile data breaches in the last couple of years, all of which have cost thousands of dollars of damage and a severe blow to the reputation of the company involved: In late 2014, hackers stole the account information of over 500 million Yahoo email accounts.

Data breaches 40

Data breaches Passwords Backups Mobile 40

SecureWorld News

DECEMBER 29, 2020

Now headlines about ransomware, cyberattacks and data breaches pour into social media feeds at a steady drumbeat. SecureWorld now takes a look at some of the largest data breaches to ever occur. Top 10 most significant data breaches. Yahoo data breach (2013). Equifax data breach (2017).

Data breaches 98

Data breaches Passwords Accountability Government 98

Krebs on Security

JUNE 25, 2019

An online search for the term “yehuo” reveals an account on the Chinese Software Developer Network which uses that same nickname and references the domain blazefire[.]com. com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., 2333youxi[.]com blazefire[.]com

Mobile 163

Mobile Technology Manufacturing Software 163

Adam Levin

APRIL 8, 2019

Facebook’s Two-Factor Authentication phone numbers exposed: After prompting users to provide phone numbers to secure their accounts, Facebook allows anyone to look up their account by using them. Canada, India, Vietnam, Argentina, Brazil, and every member state of the European Union.

Hacking 100

Hacking Data privacy Artificial Intelligence System Administration 100

Thales Cloud Protection & Licensing

DECEMBER 21, 2017

My sense is that data leaks appear to be growing exponentially due to the increasing rate of data being stored in the cloud. I was one of 68 million Dropbox users that received an email last year asking me to reset my password because they found out that in 2012 they had lost our User IDs and hashed passwords.

Encryption 59

Encryption Architecture Data breaches Passwords 59

Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 123

Threat Detection Authentication Accountability Data breaches 123

Troy Hunt

NOVEMBER 6, 2023

I like to think of investigating data breaches as a sort of scientific search for truth. You start out with a theory (a set of data coming from an alleged source), but you don't have a vested interested in whether the claim is true or not, rather you follow the evidence and see where it leads. accounts expands out to 5.8M

Data breaches 344

Data breaches Accountability Passwords 344

SiteLock

AUGUST 27, 2021

In its annual Data Breach Investigations Report , published at the beginning of 2013, Verizon revealed that businesses with fewer than 100 employees made up the single largest group of victims of data breaches. bank accounts in 2012 by cybercrooks using malware like keyloggers.

Cybercrime 87

Cybercrime Small Business Antivirus Malware 87

Troy Hunt

SEPTEMBER 17, 2020

The last bit is particularly important as I logon and would firstly, like my password not to be eavesdropped on and secondly, would also like to keep my financial information on the website secure. Maybe they're plugging into the API directly from the account page there? " It means "this is private."

VPN 359

VPN Phishing DNS Encryption 359

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys. This was a software flaw.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Anyway I was testing this suite when I happened to randomly strike two keys -- I think it was control and B -- and up popped the password manager, displaying all my test passwords in the clear. Thing was, the manager required its own password, which I had not entered; remember, I had hit only two keys. This was a software flaw.

Software 52

Software Passwords Internet Internet 52

Troy Hunt

JUNE 10, 2019

Back in 2013, I was beginning to get the sense that data breaches were becoming a big thing. Increasingly, I was writing about what I thought was a pretty fascinating segment of the infosec industry; password reuse across Gawker and Twitter resulting in a breach of the former sending Acai berry spam via the latter.

Data breaches 279

Data breaches Passwords InfoSec Accountability 279

Herjavec Group

AUGUST 26, 2021

1962 — Allan Scherr — MIT sets up the first computer passwords, for student privacy and time limits. Student Allan Scherr makes a punch card to trick the computer into printing off all passwords and uses them to log in as other people after his time runs out. A DSW data breach also exposes transaction information from 1.4

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

eSecurity Planet

JANUARY 11, 2022

Deduce is an identity-focused cybersecurity startup with two core solutions: Customer Alerts for protecting users and their data from account takeover and compromise, and Identity Insights for validating legitimate users and stopping fraud. Privafy aims to serve a valuable corner of the market – securing data-in-motion.

Cybersecurity 142

Cybersecurity Threat Detection Artificial Intelligence Risk 142

Krebs on Security

AUGUST 2, 2018

A story published here on July 12 about a new sextortion-based phishing scheme that invokes a real password used by each recipient has become the most-read piece on KrebsOnSecurity since this site launched in 2009. And with good reason — sex sells (the second most-read piece here was my 2015 scoop about the Ashley Madison hack ).

Phishing 142

Phishing Scams Passwords Password Management 142