Wednesday 29 June 2016

Hacker Hacked 32M Twitter Account and Selling It on Dark Web


The biggest Social Media Network has been hacked by hackers and around 32 millions of Twitter account’s username and password has been hacked and it is sold on dark web.

However, A Twitter representative said “said “We are confident that these usernames and credentials were not obtained by a Twitter data breach – our systems have not been breached. In fact, we’ve been working to help keep accounts protected by checking our data against what’s been shared from recent other password leaks”.

LeakedSource, a site with search engine of the leaked login details, posted in a blog that they have received the copy of the information that came from Tessa88@exploit.im, which is the same name used by the person in the biggest Russian Social network vk.com that gave the hacked data.

LeakedSource found 32,888,300 records from the cache of Twitter that includes username, password and email addresses. It has added those data on their search engine, so that user can remove the leaked information. Though the service is paid but LeakedSource is offering this service free of cost.
As per LeakedSource, they believes that login credential that got leaked are collected from the malware infecting web browsers like Firefox and Chrome, rather they hacked it from Twitter. Most of the affected users are from Russia.

In statement to TechCrunch, Twitter said that recent hijacking of Zuckerberg and other celebrities twitter accounts are hacked only due to reusing the passwords. 

A Twitter spokesperson said, “A number of other online services have seen millions of passwords stolen in the past several weeks. We recommend people use a unique, strong password for Twitter”. Twitter has also appealed the users to follow the suggestions in its help center so that they can protect their account.    


Michael Coates, Twitter’s trust and information security officer, tweeted that “he is confident the social media platform’s systems have not been compromised.”

“We securely store all passwords w/ bcrypt,” Coates added, referencing a password hashing function considered secure. “We are working with LeakedSource to obtain this info & take additional steps to protect users,” he continued.


0 comments:

Post a Comment