3 ms·
Assuming the source of the credentials (malware, other breaches, etc) is correct, 320k isn't outlandish by any means. My Twitter bot, @dumpmon, comes across th
by jwcrux 11y ago
Assuming the source of the credentials (malware, other breaches, etc) is correct, 320k isn't outlandish by any means.
My Twitter bot, @dumpmon, comes across thousands of leaked creds per day, and that's only on pastebin.
This, combined with "checker" services that can verify credentials to services like TWC make things like leaked credentials be correlated into "from these x unique dumps, we have a group of creds that all work with TWC as well".
My guess is that TWC was alerted to a file someone was trying to sell that took leaks from other public/private dumps or malware infections, checked them against TWC, and verified that they all happened to work. This would be why TWC wouldn't be able to pin down an exact source - there absolutely doesn't have to be just one source.
It happens more than you think.
- magicmu 11y agoSolid analysis, your guess makes a lot of sense IMO. I suspect that these kinds of "breaches" take place far more often than is reported -- I think until people are better educated about the importance of using unique passwords for their individual online accounts, it's an uphill battle.
- ascagnel_ 11y agoSomething similar was reported about FitBit yesterday, and they explicitly pointed to the culprit being third-party dumps. At this rate, smart users won't re-use passwords, and 2FA should be mandatory everywhere.
- misiti3780 11y agoI created a small app that harvests all the data from your feed. I wanted to get an idea of how many email addresses get pushed to pastebin every day: https://github.com/josephmisiti/spammer https://github.com/josephmisiti/spammer