Discover Top Posts Tagged with #hold security

And most of the data in question was "bogus."

New Post has been published on Digital Marketing Domain - Full Vertical - SEO, SEM & SMM services customized..!

New Post has been published on http://www.learn-digital-marketing.com/cyber-criminals-in-russia-might-know-the-password-you-forgot/

Cyber Criminals in Russia Might Know the Password You Forgot

Is the notion of online security as passé as the illusion of privacy? Maybe.

Just this week, we learned that a small group of hackers in Russia amassed a database of 1.2 billion stolen user IDs and passwords.

Hold Security, the Milwaukee, Wis.-based company that disclosed the incident, described the incident as "arguably the largest data breach known to date."

The Russian cyber gang targeted websites indiscriminately, hitting Fortune 500 companies and mom and pop sites alike. Hold Security reported the thieves "amassed more than 4.5 billion records, mostly consisting of stolen credentials. 1.2 billion of these credentials appear to be unique, belonging to over half a billion e-mail addresses."

Read full story...

#customer experience #cxm #ddos #digital #hold security #Incapsula #noreen seebacher #russian cyber gang #security #w3 techs #Web CMS #web experience #wem

Lots of questions follow Tuesday's revelation of the amassing of 1.2 billion credentials by Russian hackers

After searching online for different sources and points of view. I first found the NY TIMES article and shortly after found this PC World article, questioning the validity of the "Russian Hackers Stealing 1.2 Billions Passwords"

#PCWORLD #Hackers #ny times #hold security

Russian Gang Amasses Over a Billion Internet Passwords

By Nicole Perlroth And David Gelles, NY Times, Aug. 5, 2014

A Russian crime ring has amassed the largest known collection of stolen Internet credentials, including 1.2 billion user name and password combinations and more than 500 million email addresses, security researchers say.

The records, discovered by Hold Security, a firm in Milwaukee, include confidential material gathered from 420,000 websites, including household names, and small Internet sites. Hold Security has a history of uncovering significant hacks, including the theft last year of tens of millions of records from Adobe Systems.

Hold Security would not name the victims, citing nondisclosure agreements and a reluctance to name companies whose sites remained vulnerable. At the request of The New York Times, a security expert not affiliated with Hold Security analyzed the database of stolen credentials and confirmed it was authentic. Another computer crime expert who had reviewed the data, but was not allowed to discuss it publicly, said some big companies were aware that their records were among the stolen information.

“Hackers did not just target U.S. companies, they targeted any website they could get, ranging from Fortune 500 companies to very small websites,” said Alex Holden, the founder and chief information security officer of Hold Security. “And most of these sites are still vulnerable.”

Mr. Holden, who is paid to consult on the security of corporate websites, decided to make details of the attack public this week to coincide with discussions at an industry conference and to let the many small sites he will not be able to contact know that they should look into the problem.

There is worry among some in the security community that keeping personal information out of the hands of thieves is increasingly a losing battle. In December, 40 million credit card numbers and 70 million addresses, phone numbers and additional pieces of personal information were stolen from the retail giant Target by hackers in Eastern Europe.

And in October, federal prosecutors said an identity theft service in Vietnam managed to obtain as many as 200 million personal records, including Social Security numbers, credit card data and bank account information from Court Ventures, a company now owned by the data brokerage firm Experian.

But the discovery by Hold Security dwarfs those incidents, and the size of the latest discovery has prompted security experts to call for improved identity protection on the web.

“Companies that rely on user names and passwords have to develop a sense of urgency about changing this,” said Avivah Litan, a security analyst at the research firm Gartner. “Until they do, criminals will just keep stockpiling people’s credentials.”

So far, the criminals have not sold many of the records online. Instead, they appear to be using the stolen information to send spam on social networks like Twitter at the behest of other groups, collecting fees for their work.

But selling more of the records on the black market would be lucrative.

While a credit card can be easily canceled, personal credentials like an email address, Social Security number or password can be used for identity theft. Because people tend to use the same passwords for different sites, criminals test stolen credentials on websites where valuable information can be gleaned, like those of banks and brokerage firms.

#stolen passwords #Hold Security #hackers #identity theft

CyberVor Attack – Expert Comments

It was announced this week that a Russian gang of hackers, dubbed CyberVor by Hold Security, succeeded in stealing 1.2 billion usernames and passwords from over 420,000 websites. The scale of this attack easily makes it one of the largest data breaches in history.

#hold security

Trending Tags

Recently Viewed Tags

#hold security