Over 87GB of email addresses and passwords exposed in Collection 1 dump

ronjor · Jan 16, 2019

By Asha McLean January 16, 2019

An 87GB dump of email addresses and passwords containing almost 773 million unique addresses and just under 22 million unique passwords has been found.
Click to expand...

ronjor · Jan 17, 2019

773M Password ‘Megabreach’ is Years Old

My inbox and Twitter messages positively lit up today with people forwarding stories from Wired and other publications about a supposedly new trove of nearly 773 million unique email addresses and 21 million unique passwords that were posted to a hacking forum. A story in The Guardian breathlessly dubbed it “the largest collection ever of breached data found.” But in an interview with the apparent seller, KrebsOnSecurity learned that it is not even close to the largest gathering of stolen data, and that it is at least two to three years old.
Click to expand...

guest · Jan 20, 2019

“Collection #I” Data Breach Analysis – Part 1
January 19, 2019
https://marcoramilli.com/2019/01/19/collection-i-data-breach-analysis-part-1/

Today I’d like to write a quick partial analysis that I’ve been able to extract from those records.
In fact, while years ago the most used passwords were about names, dates or simple patters such as “qwerty”, today we observe a significative increase in pattern complexity, but still too easy to be brute-forced.

The most leaked emails come from “yahoo.com”, “gmail.com”, “aol.com” and “hotmail.com”. This is quite interesting since we are mostly facing personal emails providers (domains) rather then professional emails providers (such as company.com). So apparently, attackers are mostly focused in targeting people rather then companies

As next steps my colleagues ( Yoroi ) and I we’ll drill down focusing on nations and companies data. Releasing public information and statistics about our findings.
Click to expand...

guest · Jan 26, 2019

“Collection #I” Data Breach Analysis – Part 2
January 26, 2019
https://marcoramilli.com/2019/01/26/collection-i-data-breach-analysis-part-2/

It is interesting to compare the differences between Part 1 and Part 2, since the panorama of the most leaked email’ domain names changed quite a bit.

While there are a lot of unique entries (unique emails), there are several emails leaked multiple times.
It was also possibile to see multiple credentials (same email and password) within multiple file entries which highlights an insane reuse of credentials. [...]
Click to expand...

guest · Feb 1, 2019

Threat Actor Behind Collection #1 Data Breach Identified
February 1, 2019
https://www.recordedfuture.com/collection-1-data-breach/

Insikt Group discovered a forum post created on January 17, 2019 by Clorox, who posted seven URLs to separate databases hosted on the file sharing service MEGA.

In the forum post, Clorox linked to the Troy Hunt article “The 773 Million Record ‘Collection #1’ Data Breach,” claiming that the database Troy Hunt has is incomplete and is only a fraction of the original dump known on the dark web as Collection #1.

Further analysis showed another individual using the moniker C0rpz, who claimed to be the original creator and seller of Collection #1 as early as January 7, 2019. C0rpz also stated that another forum member, “Sanix,” purchased Collection #1 from them and then attempted to resell it to other forum members.
Sanix has since been banned from the forum, and C0rpz has posted links to MEGA sharing Collection #1 free of charge to the community.
Click to expand...

ronjor · May 19, 2020

In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” A subsequent review by KrebsOnSecurity quickly determined the data was years old and merely a compilation of credentials pilfered from mostly public data breaches. Earlier today, authorities in Ukraine said they’d apprehended a suspect in the case.
Click to expand...

https://krebsonsecurity.com/2020/05/ukraine-nabs-suspect-in-773m-password-megabreach/

Minimalist · May 20, 2020

Ukrainian Police Arrest Hacker Who Tried Selling Billions of Stolen Records

The Ukrainian police have arrested a hacker who made headlines in January last year by posting a massive database containing some 773 million stolen email addresses and 21 million unique plaintext passwords for sale on various underground hacking forums.
Click to expand...

https://thehackernews.com/2020/05/ukrainian-hacker-arrested.html

Log in or Sign up

Over 87GB of email addresses and passwords exposed in Collection 1 dump

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

Log in or Sign up

Over 87GB of email addresses and passwords exposed in Collection 1 dump

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

Useful Searches