4 ms·

thanks, this was not clear from the article. I wonder how easy it is to have the location (at least country) of a user from the breached data, to use bots in t

thanks, this was not clear from the article. I wonder how easy it is to have the location (at least country) of a user from the breached data, to use bots in the appropriate country and evade "login from a new location" protections. I guess easy enough if whole accounts have leaked.

dpkonofa 3y ago
If was indeed a DB leak, as claimed, some sites will have emails/hashes/passwords/last know login location/ip potentially. It’s not a stretch to think that a botnet could run from not only the same country but even the same region or city as the last known login or IP cluster.