Уровень 0 · материалов: 3
В кластер входят документы, описывающие инциденты утечки и распространения баз данных с паролями пользователей, и не входят документы о методах защиты от таких утечек без упоминания самих фактов компрометации данных.
Общие признаки: компрометация учетных данных, базы данных паролей, риски повторного использования паролей, продажа данных в даркнете
Группа выше: Утечки учётных данных и переписки
Смысл: The main idea is that a massive, highly valid database of VKontakte user accounts from an old breach was put up for sale on the dark web, illustrating the ongoing risk of old credentials and poor password security.
A hacker is selling a database of 100 million VKontakte accounts, many of which remain valid due to users' failure to update passwords.
Смысл: The main idea is that the leaked password databases for major email providers are not the result of a single internal breach, but rather a noisy compilation of old data gathered via phishing, dictionary attacks, and leaks from third-party websites.
An analysis of leaked email passwords reveals the data is a cumulative collection of old, often invalid credentials from phishing and third-party leaks, posing minimal risk to current users.
Смысл: The main idea is to inform the public about the 'Collection #1' data breach and encourage users to verify their account security via services like Have I Been Pwned to prevent unauthorized access resulting from password reuse.
Cybersecurity expert Troy Hunt analyzed the 'Collection #1' leak, adding 773 million unique breached accounts to the Have I Been Pwned database.