UPDATED 23:54 EDT / MARCH 07 2017

INFRA

More than 1 million decrypted Gmail and Yahoo accounts are for sale on the dark web

More than 1 million usernames, emails and decrypted passwords of Gmail and Yahoo accounts have been found on sale in a dark web marketplace.

According to reports, a dark web seller who goes by the name of SunTzu583 is offering to sell 100,000 Yahoo accounts from the 2012 Last.fm data breach, 145,000 Yahoo accounts from the 2013 Adobe breach, and accounts from the 2008 MySpace hack. The accounts are being individually offered for sale at between 0.0079 bitcoin ($9.33) and 0.0102 bitcoin ($12.04) each.

In addition, the same seller is offering 500,000 Gmail accounts from the 2008 MySpace hack, the 2013 Tumblr hack and a 2014 bitcoin security forum breach, along with an additional 450,000 Gmail accounts obtained from data breaches between 2010 and 2016. The data has been confirmed through websites such as HaveIBeenPwned as well as by attempting to enter the information into login pages.

Hacking news site Hack Read contacted a number of users who have their login credentials mentioned in the sample data and with their permission, the site attempted logging into different platforms including MySpace, Dropbox and Tumblr. In many cases, it was unable to access the accounts mentioned, but only due to the users having changed their passwords or the accounts being suspended because the users failed to change passwords after the breaches occurred.

“Although the data is old … it poses a massive security threat for victims since it is in clear text format and available altogether at one place,” the publication noted.

Users who are concerned about the security of their Gmail or Yahoo accounts are being advised again to change their passwords immediately. They also should also consider enabling two-factor authentication where it is offered to add an additional layer of security to online services. In that case, an attempted login from an unknown or unverified device or machine requires a unique, onetime code sent to a mobile device to be entered with the password for that device or machine to gain access to the account.

Image: Pixabay

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.