Bad news, you’re probably going to have to change your Twitter password as reports have emerged that 32 million login credentials are being sold on the dark web.
Before you point fingers at Twitter though, a report by TechCrunch suggests that the data was gleaned from malware that infected Mozilla Firefox and Chrome browsers. This is the word from LeakedSource, the company who was pointed in the direction of the data dump by a person who also led the firm to hacked data from Russian social network, VK.
“This data set contains 32,888,300 records. Each record may contain an email address, a username, sometimes a second email and a visible password. We have very strong evidence that Twitter was not hacked, rather the consumer was,” LeakedSource wrote in a blog post.
The firm alleges that all the passwords, even those that are supposedly, “uncrackable” were stored in plain text, something Twitter wouldn’t do. Further to this, the top email domain in the data dump is mail.ru, a Russian mail portal, with over five million instances found. This led LeakedSource to believe that Russian’s were the primary target of the supposed malware attack.
That said, millions of Yahoo, Hotmail and Gmail email addresses were also foundin the dump.
We still suck at creating passwords
Do you really want to know how bad some of the passwords that were found in the data dump are? Seriously folks, it’s bad, like worse than the MySpace data dump a few weeks back.
The top password is “123456” (120 417 users thought their account was secure with it), followed closely by “123456789” (32 755 users).
Quick-typed password staple, “qwerty” was found 22 770 times and password takes fourth place with 17 471 instances.
Whether your password is one of those abhorrent ones listed above or something more secure we suggest heading to your Twitter settings and changing your password.
We also highly recommend making sure your anti-virus and anti-malware software is updated and running a scan for any malicious software that might be lurking on your PC.[Via – LeakedSource] [Image – SA BY/2.0 Esther Vargas]