Large Scale Yahoo Email Account hack (again)

Browntoa

not for the first time (allegedly)


http://www.dailymail.co.uk/sciencetech/article-3720699/Is-email-address-password-sale-Hacker-claims-200m-Yahoo-accounts-listed-dark-web-market.html


A cybercriminal known as ‘Peace’ has listed the credentials for 200 million alleged Yahoo accounts for sale on the dark web.
Samples of the data reveal usernames and dates of birth, along with other bits of personal information – and the massive set is being sold for just 3 bitcoins, roughly $1,860.
Yahoo has neither confirmed nor denied the claims, and many users may now want to change their passwords.

Rubidium

Large type not necessary!

Lisa Baergen, a director at NuData Security, speculated that Verizon probably refused a "demand for extortion" from Peace, who then put the data up for sale online.

"All indications are that this is an old breach from 2012, prior to Yahoo changing the method in which they store and protect passwords," said Baergen. "This dark web sale of old data appears to have been triggered by the sale of Yahoo to Verizon."

The best way to protect yourself is to use a strong password and two-factor authentication or simply don't use passwords and use an alternative method to access your account e.g. an account key see here

AndyPix

Yahoo -- Are they still a thing ??!

Browntoa

original post edited to remove large font , cut and paste did it for some reason ??


Bt Yahoo still running as they never finished the migration, it was halted


https://community.bt.com/t5/Email/Migration-of-bt-internet-mail-from-Yahoo/td-p/1541028

Browntoa

Interestingly , an attempt made to steal an old yahoo account of mine this morning , they had the password , it's unique to yahoo and is made up of 14 letters and 3 numbers so not brute force attack

Associated email account was removed which notified me , while I was in there putting it back on they changed the password but not my security questions so I got back in and changed that as well. Now set up 2 step authenticifaction via mobile AND email

They had to have got my password from yahoos servers , I don't access it via apps or saved passwords , just log on to it direct on the rare occasion I use it

Sicard

Worth a read: https://forums.moneysavingexpert.com/discussion/5477305