1 Million Decrypted Gmail and Yahoo Accounts Being Sold on Dark Web

A dark web market is where one can buy wholly sorts of illegal stuff including drugs,fake id cards and weapons. Lately, these marketplaces have become the best place for hackers and cyber criminals to sell databases stolen from Cyberspace giants.

Yahoo accounts

A vendor going away the handle of "SunTzu583" is merchandising millions of Gmail and Yahoo accounts on a glum web marketplace. The itemization was promulgated this week and shows SunTzu583 is selling 100,000 Hick accounts acquired from Last.FM breach from 2012, in which 43 million user accounts were exposed and publicly released in September 2016. These accounts contain usernames, emails and their passwords in a plain text data formatting. The price for this listing is only 0.0079 BTC (USD 10.75) probably because the information is already out publicly.

Screenshot from the dark entanglement itemisation where information is being sold

Another listing from SunTzu583 shows more 145,000 Rube accounts available for sales agreement in 0.0102 BTC (USD 13.75). These accounts likewise hold back usernames, email and their decrypted passwords. According to HackRead's research, these accounts were taken from two isolated breaches includingAdobe breach in October 2013, in which 153 million accounts were breached with to each one containing an internal Idaho, username, email, encrypted password and a password hint in plain text and MySpace breach from 2008, in which 360 million user accounts were stolen and leaked on the unlighted web in 2016.

Screenshot from the darkling WWW listing where data is organism sold

Gmail accounts

Google's Gmail is known as one of the most guarantee email service providers, but there is nothing that Google can do when Gmail accounts are purloined attributable a third party rupture. The data in discussion here is accounts of 500,000 Gmail users being sold on the same marketplace for the price of 0.0219 BTC (USD 28.24). The data contains usernames, emails and their clear text passwords purloined from three breaches including Bitcoin Security Meeting place breach in September 2014, MySpace breach in 2008, and Tumblr breach in 2013, in which millions of accounts were stolen and leaked online.

Screenshot from the glowering web list where data is being sold

Other listing shows the same vendor is selling 450,000 Gmail accounts in0.0199 BTC (USD 25.74). Just like their other listings these accounts too include emails and their top text passwords. This itemisation was apparently compiled with the help of information stolen fromBitcoin Security Forum, Tumblr, Last.fm, 000webhost, Adobe brick, Dropbox, Split second Flash Gyration, LookBook and Xbox360 ISO breach. It must be illustrious that entirely these breaches took places betwixt 2010 to 2016.

Screenshot from the dark web itemisation where data is being sold-out

Is the information legit?

Although in some cases information technology is corneous to verify if data happening the dark World Wide Web is legit or not but in this pillowcase, HackRead checked the data on data breach notice platforms suchlike Hacked-Element 105 and Haveibeenpwned.

Also, we contacted some of the users WHO have their login credential mentioned in the sample data and with their permission, we logged into different platforms including MySpace, Dropbox, Tumblr, etc and it sour out that several of them recently changed their passwords and in some cases their accounts were temporarily blocked since they did non change their passwords which highlights the fact that although the information is old yet information technology poses a heavy security threat for victims since it is in clear text data format and available altogether at one place.

Information technology is extremely recommended that if your invoice was among the breaches mentioned above and you cause not changed your password yet coif information technology right at once.

DDoS attacks are increasing, calculate the cost and chance of a DDoS attack along your business with this DDoS Downtime Monetary value Calculator.

I am a UK-based cybersecurity journalist with a passion for covering the fashionable happenings in cyber security and tech world. I am likewise into play, reading and investigative journalism