Live data from Hacker News

773M Password ‘Megabreach’ Is Years Old

krebsonsecurity.com

51–60 of 177 posts

Re: 773M Password ‘Megabreach’ Is Years Old

#51
I think they are also trying to use the same credentials to log in to accounts. I got an email from Epic Game saying there are too many failed login attempts, so it was suspended. Ironically, I don't even remember having one. So I logged into the account and made sure there none of the information on there were personal.

Re: 773M Password ‘Megabreach’ Is Years Old

#52
post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

I've been getting what sounds like the same emails. They used an email address and password that I used only on monster.com back in the early 2000s.

Re: 773M Password ‘Megabreach’ Is Years Old

#53
post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

I've gotten, and still get, these kinds of emails daily for months. Sometimes in groups of 3. The bitcoin address is not the same as the one you linked.

https://imgur.com/a/kMylZ64

Re: 773M Password ‘Megabreach’ Is Years Old

#54
post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

Oh. Been getting these for a while. So those are actual passwords I used. I was wondering how stupid the whole thing was telling people some random string is their old password.

Definitely, the first one I got had me very worried as it actually got the password correct. And I can spot these kinds of fake emails instantly.

Re: 773M Password ‘Megabreach’ Is Years Old

#55
post #28

Earlier quoted context omitted.

The email contains: > You will make the payment by Bi‌tco‌in (if you do not know this, search 'how to buy b‌itcoi‌n' in Google). The top result is from coinbase [1]. I would say everyone capable of online banking is capable of following these steps. [1] https://www.coinbase.com/buy-bitcoin

Wonder if it would be a good idea for coinbase to mention the possibility of you being scammed...

And lose some sweet free money?

Re: 773M Password ‘Megabreach’ Is Years Old

#56
post #28

Earlier quoted context omitted.

The email contains: > You will make the payment by Bi‌tco‌in (if you do not know this, search 'how to buy b‌itcoi‌n' in Google). The top result is from coinbase [1]. I would say everyone capable of online banking is capable of following these steps. [1] https://www.coinbase.com/buy-bitcoin

Wonder if it would be a good idea for coinbase to mention the possibility of you being scammed...

At a coffee shop on the campus of my nearby university there's a bitcoin machine with a piece of paper above it outlining bitcoin scams. Coinbase really should follow suit with the standard "The IRS, FBI, Jesus will never ask you to send them bitcoin..."

Re: 773M Password ‘Megabreach’ Is Years Old

#57
post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

I think it's interesting that they're trying to get non-technical people who would fall for this kind of thing to buy bitcoins and then send them. Like the number of people who would believe this, have a thousand dollars on hand, and be able to buy and send bitcoins is probably tiny.

Re: 773M Password ‘Megabreach’ Is Years Old

#58
post #28

Earlier quoted context omitted.

The email contains: > You will make the payment by Bi‌tco‌in (if you do not know this, search 'how to buy b‌itcoi‌n' in Google). The top result is from coinbase [1]. I would say everyone capable of online banking is capable of following these steps. [1] https://www.coinbase.com/buy-bitcoin

Wonder if it would be a good idea for coinbase to mention the possibility of you being scammed...

Why? They take a percentage out of everything you transfer, ofc they wouldn’t want to warn you.

Re: 773M Password ‘Megabreach’ Is Years Old

#59

For Troy Hunt's detailed breakdown of this particular breach: https://www.troyhunt.com/the-773-million-record-collection-1...

It just took a minute of searching to find the other collections. Does Troy wait for people to send him specific files? https://raidforums.com/Thread-Collection-1-5-Zabagur-AntiPub...
Post reply on HN