Russian hacker gang amasses 'largest ever' database of online credentials
Fewer than a dozen hackers in their 20s amassed the data which includes passwords, emails and usernames - but no financial data
A group of Russian hackers have amassed the largest ever cache of stolen internet credentials, reportedly accumulating more than 1.2 billion user name and password combinations and more than 500 million email addresses.
News of the group’s efforts comes from US firm Hold Security, who were previously responsible for uncovering the Adobe Systems hack of some 38 million accounts last year.
Hold Security said the hackers, based in a small city in south-central Russia, took information from more than 420,000 websites.
“Hackers did not just target U.S. companies, they targeted any website they could get, ranging from Fortune 500 companies to very small websites,” Alex Holden, the founder and Hold Security told the New York Times. “And most of these sites are still vulnerable.”
The US firm has not disclosed the identity of any of the targets, but say that the Russian gang used an infected botnet to conduct “possibly the largest security audit ever”, probing hundreds of thousands of websites looking for weaknesses.
Although the stolen information does not include financial data such as credit card numbers, the sheer size and scope of the cache has been described as a threat to both consumers and companies.
The Times reports that so far little of the stolen data yet been put to use, and that those logins that have been exploited are mainly being used to send spam messages on social networks like Twitter.
Hold Security uncovered the existence of the stolen data after a 7 month investigation, identifying fewer than a dozen men in their 20s who make up the gang. The men know one another socially and reportedly divide their work “like a small company”.
Mr Holden said his firm had begun alerting affected companies but warned that many of the sites involved were still vulnerable. Experts have cautioned that although no financial data was stolen, the online credentials taken by the gang could be just as damaging in terms of identity theft.
Life & Style blogs
Planes go hybrid-electric in important step to greener flight
Who is Teresa Fidalgo? Debunking the fake ghost story that's got Instagram spooked
Boxing Day sales: From Asos to Harrods, the best fashion deals
Victoria Beckham's clothing sales double to £30 million in one year
Relate prepares for New Year spike in calls as relationships feel festive strain
British actor Idris Elba cannot star as James Bond because he is black, says shock jock Rush Limbaugh
Rozanne Duncan: Ukip expels councillor for 'jaw-dropping' comments made in BBC TV interview
Germany anti-Islam protests: 17,000 march on Dresden against 'Islamification of the West'
Ukip member gets into Christmas spirit with Union Flag plea to Santa 'for our country back'
BBC director Danny Cohen: Rising UK antisemitism makes me feel more uncomfortable than ever
Katie Hopkins speaks out on childhood obesity: 'Parents of fat children should be prosecuted for child cruelty'
- 1 The Boy in the Dress, TV review: David Walliams' Boxing Day treat is a celebration of being different
- 2 Exclusive: Abusers using spyware apps to monitor partners reaches 'epidemic proportions'
- 3 Andy Murray takes to Twitter to show off his Christmas jumper
- 4 Katie Hopkins speaks out on childhood obesity: 'Parents of fat children should be prosecuted for child cruelty'
- 5 Top 10 travel destinations for 2015: From Haiti and Alaska to Namibia and Iceland
iJobs Gadgets & Tech
£35000 - £45000 per annum: Ashdown Group: Moodle Developer (PHP ,Linux, Apache...
£17000 - £30000 per annum: Recruitment Genius: This is a fantastic opportunity...
£21000 - £26000 per annum: Recruitment Genius: This Award-winning pharma softw...
£30000 - £45000 per annum: Recruitment Genius: A Senior Java Developer is requ...