![]() ![]() ![]() The gang of criminal nonmasterminds exposed their own operation by storing the records on an unsecured cloud database. The simplicity of that technique doesn’t require genius, something the hackers proved by committing their own security blunder. The hackers just had to try the combinations on Spotify and look for matches, a technique known as credential stuffing. The hackers were successful because Spotify account holders were reusing passwords from other accounts they had, a basic security mistake. ![]() All it took was a cache of login credentials stolen in other data breaches, and some patience. The breach also offers a reminder of a key principle to apply when choosing passwords for your account …ĭon’t use the same passwords for multiple accounts.ĬNET reports that the passwords were identified by credential-stuffing.Ī group of hackers didn’t have to breach Spotify’s systems to access as many as 350,000 accounts on the music-streaming service. Hackers who compiled a database of as many as 350,000 Spotify passwords proceeded to store it on a cloud server … without a password. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |