Priyanka Tiwari
Share
Suspense crime, Digital Desk : Cybersecurity specialist Jeremiah Fowler recently revealed that a private file was discovered containing 184 million usernames and passwords which had been leaked from various websites. This information was stored in a 47.42 GB database, which did not use any form of password protection or encryption.
The data breach compromises records which contain email addresses, usernames, and unencrypted passwords of not only popular social media platforms such as Facebook and Instagram, but also Microsoft, Snapchat, and Roblox, as well as some banking, healthcare, and governmental services. The existence of the data accompanied by hyperlinks to the actual services only increases the threat level.
Use of Infostealer Malware Highly Suspected
According to Fowler, the data was obtained using info-stealers, a form of malware that extracts login information, browser data, saved cookies, and sometimes captures screen or keyboard input from infected devices in complete stealth. Primarily because those individuals whose data was collected had no idea their information was being pilfered.
Disturbingly some people confirmed they still used the unencrypted passwords which underlines the alarming truth of the breach.
Unknown Origin, Global Impact
The IP address of the database was associated with two questionable domains, one inactive and the other unregistered which does not provide insight into the breach’s source. Whether the information was being gathered for study purposes or unlawful activities remains uncertain. The hosting provider disabled access to the database shortly after receiving the alert.
Risks of Account Takeovers and Identity Theft
The breach presents significant risks in terms of identity and financial fraud, in addition to phishing scams. With many people reusing passwords, a single breached credential can lead to multiple account takeovers.
Cybersecurity specialists recommend that users refresh passwords, refrain from creating identical passwords, activate two-step verification, and check all devices for malicious software. Evaluating one’s email on breach-check services, like Have I Been Pwned, is also suggested.
Read More: Goodbye Range Anxiety? Yamaha’s New Scooter Promises 160 km on a Single Charge
