A very secure welcome to all Tech Geeks to Dark Street Hackers !!

Today we are going to take a look about recent data breach of 773 million user credentials of email and passwords announced in hacker forums. It seems like it is the biggest data breach in decade. It is bigger than previous data breaches like “Equifax” and “Marriott International”.



Let’s take a deep dive into this Massive Data Breach :

The first report about this massive data breach is generated by the Troy Hunt who is a security researcher and maintains the website called “Have I Been Pwned” where you can find is your email or password is “pwned” somewhere !! He informed the people on his official Twitter Handler.




Since we are visiting different websites using same email id and same password for our easiness so that we can easily remember it. To measure this Troy has created a website called “haveibeenpwned” to verify the email address has been used any other places, so users can check their email criticality. You can also check your password’s uniqueness.


Let’s see what is actually happened ?

The Popular cloud service Mega cloud storage, recently came to know that they identified folder named as “Collection#1”, the folder has around 12,000 files and around 87GB of data.

The folder “Collection#1” contains data of Massive Data Breach and has a set of email addresses and passwords totaling 2,692,818,238 rows that have been illegally collected from many different sources. This leads to expose many sensitive credentials of users of the various sources. And the data is collected in various time frames and kept in the folder. The below image is a screenshot of the folder called “Collection#1”.


So approximately 772,904,991 unique email addresses and 21,222,975 unique passwords have been leaked which is now stored in Have I been Pwned (HIBP).

Associated Risk :

The Email Addresses and passwords can be used by the hackers for the malicious activity and gaining unauthorized access to the official website with your credentials. They can sell your data in Darkweb for achieving the great market price.

Current Solution :

1.) Don’t use same password in all websites.
2.) Enlarge the strength of your password by using alphanumeric characters along with the special characters.
3) Use Two-factor authentication where it is allowed.

Steps to check your Email Address is pwned or not ?

1)     Open the below link : https://haveibeenpwned.com/

2)     Enter your  email address and click pwned.

If it shows Green Line as per below then you are safe.
 

But if it shows the red line as per below image then you have to take steps from being lost of your data.


So take a look of the above link and check you are pwned or not…

So that’s it from the our side. Stay connected to Dark Street Hackers and subscribe us for more hacking related news. Thanks for reading. Good Bye !!

0 Comments