Beware!! 15 Billion Stolen Credentials for Sale On the Dark Web uniccsx, uniccshop-bazarcom

New research indicates that more than 15 billion username and passwords are circulated on the dark web. This exposed credentials would result in account compromise.
Account Takeover (known as ATO) is a malicious activity in which attackers take over legitimate user’s online accounts.
We rely on passwords to safeguard our online sensitive data such as our financial documents, personal information, and other sensitive documents.
Attackers target all types of your online accounts not only limited to e-commerce or financial accounts, but they also use to target all types of accounts including streaming and cable TV subscriptions to VPNs and adult websites.
According to the report “From Exposure to Takeover” published by Digital Shadows Photon Research Team, more than 15 billion credentials are circulated in the dark web have yielded a 300 percent increase in stolen credentials since 2018.
The stolen credentials found to be harvested from 100,000-plus discrete breaches, among that 5 billion of them are unique.
Unsurprisingly banking and financial credentials are highly targeted, those credentials are found in huge volumes.
Those credentials result in a simple account to entire organization compromise, they are “sold or auctioned for an average of $3,139 and up to $140,000.”
Also, domain administrator access ads with descriptions including “petrochemical company,” “cybersecurity company,” “architecture and engineering company,” “petroleum company,” “big university,” and various state governments are advertised.
Following is the list of breakdown of different account listings
“Users of Russian-language cybercriminal forums like Exploit and XSS often freely share credentials for entertainment services with other forum members.”
Brute-force cracking tools also sold at hacker forums for an average of $4, “some advertisements were super vague―“USA Bank login Cracker Bruter”―but others were targeting a specific service, like Hulu, Minecraft, or Spotify.”
Some advertisements also include Burp Suite Professional application, Hydra, login cracker, Zeus and WarBot botnets, and Sentry MBA account cracker.
“OpenBullet includes multiple tools that can be used for scraping and parsing data, automated penetration testing and unit testing with Selenium”
Following are the 10 sectors with most breached credentials
Technology credentials represented 31, following to that food-and-beverage and financial services, at 16 percent and 14 percent.
Monitoring network activity, Monitor for leaked credentials of your customers. increasing user awareness and Implement multi-factor authentication that doesn’t use SMS messages are the best way to mitigate password thefts.
Also Read
Dark Web Secrets: What Should You Know About Your Information Being on the Dark Web?
Hackers Selling More than 200 Million Stolen Data from Chinese Hotel Chain in Dark Web
List of Top Ten Dark Web Activities That Alerts Organizations a Possible Breach by Hackers
uniccsx uniccshop-bazarcom

Author: wpadmin