Hackers steal 2 Million Facebook, Gmail, twitter accounts with Pony Botnet

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-9LvE8h-G_4F_sf-uD1RzJ49fGvrYAJV5j_6QqqhCguiPmGMqSm6_NrQFAhQVkXcB2kb4UGhlITPys7YgCRTL2RzBnNqWJz3CLss6LHhRnInimAcWf2jkFI_GYjRif8sUMoFiht_kOM/s640/Pony-botnet-steals-2-million-passwords.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-9LvE8h-G_4F_sf-uD1RzJ49fGvrYAJV5j_6QqqhCguiPmGMqSm6_NrQFAhQVkXcB2kb4UGhlITPys7YgCRTL2RzBnNqWJz3CLss6LHhRnInimAcWf2jkFI_GYjRif8sUMoFiht_kOM/s640/Pony-botnet-steals-2-million-passwords.jpg" width="320" /></a></div><div style="text-align: justify;">Cyber criminals have stolen more than two Million facbeook, Gmail, Twitter, Linkedin and yahoo accounts with the help of Pony malware, according to report from Trustwave.<br /><br />Security researchers at Trustwave gained access to the admin control panel of the "Pony botnet" which is storing a large amount stolen credentials from the infected machines.<br /><br />According to their <a href="http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html" target="_blank">report</a>, around 1,580,000 website login credentials, 320,000 email credentials, 41,000 FTP credentials were stolen.<br /><br />Sponsored Links<br />Approximately 318121 facebook , 59549 yahoo, 54437 Google, 21708 Twitter login credentials were affected.<br /><br />The most commonly used password is appeared to be the unsurprisingly the weakest one.  As usual, '123456' password keep it's position in the top.  The second & third is '123456789' and '1234' respectively.<br /><br />Facebook, Linkedin, Twitter and other services is reportedly resetting the account's passwords.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 5, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Hackers steal 2 Million Facebook, Gmail, twitter accounts with Pony Botnet

Cyber criminals have stolen more than two Million facbeook, Gmail, Twitter, Linkedin and yahoo accounts with the help of Pony malware, accor...

Read more »

MacRumors Forums hacked, 860,000+ users data compromised

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ktXWvdg-rxUzfBqS7xH6MMkGlWuoX-eXN0Oasmca4n1NlErM19bZsYPIbQQWXmAyqaI8E48UI7ZQli747z6Lqz0FIvV7f12NZdu6RyXqNLIPRb_KSZ-cBSXnWWoxfhoys_mkV_W-3Ac/s1600/macrumors-forums-hacked-database-stolen.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="175" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3ktXWvdg-rxUzfBqS7xH6MMkGlWuoX-eXN0Oasmca4n1NlErM19bZsYPIbQQWXmAyqaI8E48UI7ZQli747z6Lqz0FIvV7f12NZdu6RyXqNLIPRb_KSZ-cBSXnWWoxfhoys_mkV_W-3Ac/s200/macrumors-forums-hacked-database-stolen.jpg" width="200" /></a></div><div style="text-align: justify;">MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed passwords.<br /><br />"In situations like this, it's best to assume that your MacRumors Forum username, email address and (hashed) password is now known." Editorial Director Arnold Kim wrote.<br /><br />The hacker who behind the attack also made a post in MacRumors forum regarding the breach saying "We're not 'mass cracking' the hashes. It doesn't take long whatsoever to run a hash through hashcat with a few dictionaries and salts, and get results."<br /><br />Hackers also claimed that they are not going to use the compromised credentials to log into gmail, apple accounts or any other accounts unless they target users specifically for some reason.<br /><br />"Stop worrying, and stop blaming it on Macrumors when it was your own fault for reusing passwords in the first place." the hacker added.<br /><br />It appears hackers have gained access to the database by logging into the forum with the stolen credentials of a single moderator.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

MacRumors Forums hacked, 860,000+ users data compromised

MacRumors forums have been breached by hackers who managed to obtain the information belonging to 860106 users that includes hashed password...

Read more »

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlizJ25REa0LhKgmdXziE0SEL26rKhdvWX7LkLYwT9o04AN-V6euD0u5y0Uddp0YeKnGkAwDoWeNxZtsDUlGr7qD7fg5TX0lCLidBwBsQ66-flbS599tnapEId2oF1XVAxJcyapdkQgU/s200/bufferapp-hacked.jpg" /></a></div><div style="text-align: justify;">Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website.<br /><br />The hackers managed to steal the facebook, twitter access tokens of users stored in their server that allowed the hackers to post Spam on behalf of Buffer's users.<br /><br />However, CTO Sunil noted in their blog that hackers were not able to get access to any passwords, billing information or any other sensitive information.<br /><br />The company immediately took a step and invalidate all twitter access tokens and added encryption for all of them. He also noted they are using an extra security parameter for facebook API calls to make it more secure.<br /><br />The company managed to identify the source of the security breach and closed the vulnerability.</div><div style="text-align: justify;"><br /></div><br /><br /></div>

Buffer social Media app admits security breach, facebook and twitter access tokens stolen

Buffer, an app that allows users to schedule their social media posts, has recently acknowledged that hackers breached their website. The ha...

Read more »