Get the latest tech news
Data breach exposes 184M passwords, likely captured by malware
The file was unencrypted. No password protection. No security. Just a plain text file with millions of sensitive pieces of data.
Usernames, passwords, emails, and URLs for a host of applications and websites, including Google, Microsoft, Apple, Facebook, Instagram, and Snapchat, among others, were stored in a file. A popular tool used by cybercriminals, an infostealer is designed to grab usernames, passwords, and other sensitive data from breached sites and servers. Since the provider would not disclose the name of the file's owner, Fowler said he didn't know if the database was created legitimately and then accidentally exposed or intentionally used for malicious reasons.
Or read this on Hacker News
