Security News Files With 42 Million Emails and Passwords Found On Free Hosting Service

[LASER_oneXM]

Content source

https://www.bleepingcomputer.com/news/security/files-with-42-million-emails-and-passwords-found-on-free-hosting-service/

A huge database with email addresses, passwords in clear text, and partial credit card data has been uploaded to a free, public hosting service.
The total number of unique email addresses and plain text passwords in the collection is 41,826,763 and they were uploaded to the anonymous file hosting service kayo.moe.
The operator of the sharing service sent the set to Troy Hunt, Australian security researcher and creator of the Have I Been Pwned data breach index site, to compare it and check whether it was the result of an unknown data breach.

Most likely intended for credential stuffing

Based on the format of the data, Hunt thinks the lists are most likely intended for credential stuffing attacks, which combine into a single list cracked passwords and email addresses and run them automatically against various online services to hijack the user accounts that match them.

 

[Burrito]

Ouch.