Russian Hackers Steal 1.2 Billion Passwords
Russian hackers have stolen 1.2 billion user names and passwords in a series of Internet heists affecting 420,000 websites, according to a report.
The thievery was described in a New York Times story based on the findings of Hold Security, a Milwaukee firm that has a history of uncovering online security breaches. Hold Security didn't immediately respond to inquiries from The Associated Press.
The identities of the websites that were broken into weren't identified by the Times, which cited nondisclosure agreements that required Hold Security to keep some information confidential.
The reported break-ins are the latest incidents to raise doubts about the security measures that both big and small companies use to protect people's information online.
Security experts believe hackers will continue breaking into computer networks unless companies become more vigilant.
"Companies that rely on usernames and passwords have to develop a sense of urgency about changing this," Avivah Litan, a security analyst at the research firm Gartner told the Times.
Retailer Target Corp. Is still struggling to win back its shoppers' trust after hackers believed to be attacking from Eastern Europe stole 40 million credit card numbers and 70 million addresses, phone numbers and other personal information last winter.
Alex Holden, the founder and chief information security officer of Hold Security, told the Times that most of the sites hit by the Russian hackers are still vulnerable to further break-ins. Besides filching 1.2 billion online passwords, the hackers also have amassed 500 million email addresses that could help them engineer other crimes, according to Hold Security.
So, far little of the information stolen in the wave of attacks appears to have been sold to other online crooks, according to the Times. Instead, the information is being used to send marketing pitches, schemes and other junk messages on social networks on Twitter, the newspaper said.
The breadth of these break-ins should serve as a chilling reminder of the skullduggery that has been going undetected on the Internet for years, said John Prisco, CEO of another security firm, Triumfant.
"This issue reminds me of an iceberg, where 90 per cent of it is actually underwater," Prisco said in an emailed statement. "That's what is going on here. So many cyber breaches today are not actually reported, often times because companies are losing information and they are not even aware of it."
FROM OUTLOOKCrystal BallRarely do people actually want to chat, mostly they are there to pick each other up and type...more from outlook>>>
FROM THE WEBNEWS ANALYSISIn a letter sent to his employees on Monday, the dmore from WEB>>>
FROM WIRESA consumer organisation today challenged the recenmore from WIRES>>>
- SC Allows Marine Latorre to Stay Back in Italy
- Don't Behave Like Lords, 'Fall in Line': SC Tells BCCI
- Day After Stoning of Saamna Office in Maharashtra, Cartoonist Expresses Regret
- Former Israeli President Shimon Peres Dies at 93
- Pak Approaches World Bank Amid Reports of India Revoking Indus Water Treaty
- Most SAARC Members Join India, Pull Out of Summit in Pakistan
- Roasted For Being Dark, Parched Actor Tannishtha Chatterjee Gets Apology
- Karachi's Stand-Up Comedian Has His Reasons Why India And Pakistan Should Not Go To War
- Prabhu Deva Does A Gandi Baat Jig With Father
- Highlights From The First US Presidential Debate
- List Of People Who Have Been At The Receiving End Of A Shoe
- Watch: A Poacher's Court Tries To Save Elephants And Rhinos In Africa
- MH17 Probe 'Biased', Moscow 'Disappointed': Foreign Ministry
- NIA Gets Custody of PoK Duo Who Facilitated Uri Attack
- Sahara Group Has Taken Us for a Ride: SC
- Pakistani Singer Shafqat Amanat Ali's Concert in Bengaluru Cancelled
- Idols of Durga Vandalised in Bangladesh
- Kashmiri Student Booked For Sedition Over 'Anti-National' Post
- MOST VIEWED
- MOST COMMENTED