Giant spambot scooped up 711 million email addresses

mjm3346

A malware researcher has discovered a spamming operation that has been drawing on a list of 711.5 million email addresses.
The scale of the scheme appears to make it the biggest find of its kind.

http://www.bbc.co.uk/news/technology-41095606


Members of the public can check if their accounts have been affected via

https://haveibeenpwned.com/

Misslayed

I found a very old one of mine in that list, haven't used it for at least 8 years, accounts for the 'I found your email on a website you registered on to make money from home' spam. And possibly the (very) explicit ones I get which assume I'm a chap (for the avoidance of doubt I'm a chappess).

Zanzib

My everyday personal one has- which explains the spammy/fake emails I've been receiving.

JamboDP

Probably why I've been getting all those sex emails using my own email address.

GeeBee38

Mine is on it too, what can you do about it apart from change your password?

Thanks

hdh74

Mine's on two lists apparently...

superhez

I'm on 6 lists

What do you do?

LeeRits

You can't do anything unfortunately. The lists are already out there and in the hands of people who want them. All you can do is change your passwords, try not to reuse the same password across websites and if some websites allow it, enable 2-step verification. 2-step verification usually involves getting a security code through an app, text message or email when logging into a website and stops people accessing your information. It's a pain in the backside but unfortunately that's just how it is.

NorfolkBroad

I checked my email and it came up with me being at risk from being a member of two sites/forums I have never heard of and certainly haven't joined so not sure how accurate it is.

mjm3346

NorfolkBroad wrote: »

I checked my email and it came up with me being at risk from being a member of two sites/forums I have never heard of and certainly haven't joined so not sure how accurate it is.

Generally means your e-mail has been used on the sites, doesn't have to be you that used them.


I have several e-mail addresses on the big list, but bizarrely one I set up specifically to use on "spammy sites" is not there (although the sites generate enough rubbish themselves anyway)

Blueyez

do you just type your email address in?