Over 300K Spotify accounts hacked in credential stuffing attack

guest · Nov 23, 2020

Over 300K Spotify accounts hacked in credential stuffing attack
November 23, 2020
https://www.bleepingcomputer.com/ne...ccounts-hacked-in-credential-stuffing-attack/

Hackers have been attempting to gain access to Spotify accounts using a database of 380 million records with login credentials and personal information collected from various sources.

For years, users have complained that their Spotify accounts were hacked after passwords were changed, new playlists would appear in their profiles, or their family accounts had strangers added from other countries.
A new report detailing how a database containing over 380 million records, including login credentials, is actively used to hack into Spotify accounts may shed some light on these account breaches.
Click to expand...

300 million records with user info for hacking Spotify accounts
Today, VPNMentor released a report about a database exposed on the Internet that contained 300 million username and password combinations used in credential stuffing attacks against Spotify.

The researchers believe that the 300 million records listed in the database allowed the attackers to breach 300,000 to 350,000 Spotify accounts.
Click to expand...

vpnMentor: Report: Spotify Targeted in Potential Fraud Scheme

Led by Noam Rotem and Ran Locar, vpnMentor’s research team has discovered a possible credential stuffing operation whose origins are unknown, but that affected some online users who also have Spotify accounts.

Working with Spotify, we confirmed that the database belonged to a group or individual using it to defraud Spotify and its users. We also helped the company isolate the issue and ensure its customers were safe from attack.
Click to expand...

Log in or Sign up

Over 300K Spotify accounts hacked in credential stuffing attack

guest Guest

Log in or Sign up

Over 300K Spotify accounts hacked in credential stuffing attack

guest Guest

Useful Searches