Un hacker con el alias de "Mastermind" en línea en un foro en línea utilizada por los ciberdelincuentes afirma la responsabilidad del hack en un sitio web de citas en línea sin nombre, según los últimos informes.
Las credenciales filtrados se dice que son 100% válidos en un anuncio a un sitio de la pasta, y Daniel Ingevaldson, director de tecnología de fácil solución, dijo que la lista incluía direcciones de correo electrónico de Hotmail, Yahoo y Gmail.
"La lista parece ser de carácter internacional con cientos de dominios listados de todo el mundo", dijo Ingevaldson en un blog el domingo.
"Los hackers y estafadores suelen aprovechar credenciales robadas para cometer fraude no en el sitio hackeado original, pero para usarlos para explotar contraseña reutilización para escanear automáticamente y poner en peligro a otros sitios como la banca, los viajes y los proveedores de correo electrónico."
La lista de datos filtrada contiene más de 7 millones de credenciales de Hotmail, 2,5 millones de Yahoo, y 2,2 millones de Gmail. 50% de las credenciales eran para la gente en Rusia, y el 40% provenía de la Unión Europea.
However, it is unclear how the credentials from the dating website were stolen and if the database contained the passwords in encrypted form or in plain text.
Though, Easy Solutions draws attention to the fact that spear phishing attacks could also been used to steal the information directly from the users of targeted website. "This incident is an early indication that they are moving in that direction, as the first step is acquiring email databases with a relevant motive."
So far, it is also not at all clear if the leaked credentials can be used to access the email accounts or the account of the dating website. But, hackers can still use the stolen usernames and passwords to try to access victims’ bank accounts, health records or even more sensitive data.
According to different media outlets, the personal data believed to be stolen from the popular dating website, named TOPFACE, with more than 90 million registered users. The business is headquartered in Sankt Petersburg, Russia, and according to the website, more than 50% of its users are from outside Russia.
We haven’t heard from Topface yet. Also, the company neither confirmed nor deny if it suffered a breach recently that could have resulted in exposing a database of more than 20 million people. However, we have seen no indication of this data breach beyond the Pastebin post.
Easy Solutions is a US-based company that provides security products for detecting and preventing cyber fraud across different computer platforms.
No comments