6 ms·

I'm pretty sure Facebook and Google passwords are going to be hashed right?

• 369548684892826 1y ago
  So if this is real then it's got to be some widely installed keylogger?
  • WorldMaker 1y ago
    That's the researcher's assumption as well: > The uniform formatting and lack of prior exposure suggest these weren’t collected passively. They were scraped or exfiltrated using active tools—most likely infostealer malware—and gathered into datasets optimized for sale or deployment.