. .
Security experts have discovered another online database that is losing data on tens of millions of people. You are not yet sure where the data came from. They know it is used in widespread attacks on Spotify accounts.
ANTALYA, TURKEY – 27. FEBRUARY: A cell phone screen displays the Spotify logo in Antalya, Turkey . . . [] On the 27th. February 2020. (Photo by Mustafa Ciftci / Anadolu Agency via Getty Images)
The database was discovered by vpnMentor’s research team, who are tracking unsecured data like this with astonishing regularity. The experts are constantly searching the web for such information as part of an ongoing mapping project.
This newly discovered dataset contained more than 380 million records. The data does not come from Spotify and contains far more information than just Spotify account details.
According to the team’s analysis, the Spotify credentials stored in it are being used in what appears to be a massive scam program. It is believed that up to 350. 000 user accounts were selected as the target.
« Working with Spotify, we have confirmed that the database belongs to a group or individual that is being used to defraud Spotify and its users, » reported vpnMentor. The team also coordinated efforts with Spotify to minimize the impact on users.
How did this 75 gigabyte database come about? vpnMentor is confident that it was compiled either from illegal sources or from other unsecured databases.
Dark web marketplaces are trading briskly with user accounts for services like Spotify. They don’t have the same prices as more confidential accounts like Gmail or Facebook, but they are still in high demand.
Often times, these accounts are compromised due to the reuse of passwords. One of the more notorious incidents happened last winter when Disney Plus hit the market. Access to thousands of brand new accounts was put up for sale almost instantly – all because people had registered with passwords they had previously used elsewhere.
vpnMentor notes that the risk here goes beyond unauthorized access to user accounts. The data could be used to launch sophisticated phishing attacks that aim to collect payment card details and other sensitive personal information.
Lee began writing about software, hardware, and geek culture around the time the Red Wings last won the Stanley Cup. However, the two are in no way related.
Lee began writing about software, hardware, and geek culture around the time the Red Wings last won the Stanley Cup. However, the two are in no way related. When he’s not caught up on or blogging about technical news, he can watch or play baseball and do his part in bringing up the next generation of geeks.
Spotify, credentials, users, computer security
World news – AU – Database leak reveals fraudulent scheme for 300. 000 Spotify users
Ref: https://www.forbes.com
