Details of over 600 million accounts stolen by the hackers from 16 websites

The Register reported that details of over 600 million accounts that have been stolen by the hackers from 16 websites, which includes MyFitnessPal, Dubsmash and ShareThis among others, have been made available on Dark Web. Dark Web, also called as Darknet, is actually an encrypted part of internet that is not visible to the search engines, and also requires use of the anonymizing browser known as Tor for getting accessed. In fact, Dark Web is collection of the encrypted websites which the criminals use for buying and selling the stolen information along with other illegal items.

The stolen information primarily includes names of the account holders, passwords along with email addresses, as per the report which appeared around mid-February 2019. Moreover, it is being claimed that the databases which aimed to make "life easier" for the hackers could be purchased under $20,000 in bitcoin from Dream Market cyber-souk that is located in Tor network.

The price seems to be quite cheap as this information is targeted for the spammers as well as credential stuffers, who can use this information to also gain access to various other websites where the users have been using similar usernames and passwords.

The hacked websites have been Dubsmash (with 162 million accounts stolen), MyFitnessPal (with 151 million accounts stolen), MyHeritage (with 92 million accounts stolen), ShareThis (with 41 million accounts stolen), HauteLook (with 28 million accounts stolen), Animoto (with 25 million accounts stolen), EyeEm (with 22 million accounts stolen), 8fit (with 20 million accounts stolen), Whitepages (with 18 million accounts stolen), Fotolog (with 16 million accounts stolen), 500px (with 15 million accounts stolen), Armor Games (with 11 million accounts stolen), BookMate (with 8 million accounts stolen), CoffeeMeetsBagel (with 6 million accounts stolen), Artsy (with 1 million accounts stolen), and DataCamp (with 700,000 accounts stolen), as per the report on The Register.

The seller, supposed of being located outside the US, said The Register that data of Dubsmash is being purchased by one person at least.

While last year a few of these websites, such as MyFitnessPal, MyHeritage and Animoto, have warned their customers that they were compromised, many others have recently started notifying their users regarding the hacks.

» SPAMfighter News - 2/27/2019