A malware stole about 26 million user login credentials from almost a million websites!
According to The National News, hackers have stolen 1.2 terabytes of personal information using trojan-type malware. The report says the malware was transmitted through email and illegal software. The software includes Adobe Photoshop 2018, a Windows cracking tool, and several cracked games.
The hackers used the malware to steal nearly 26 million login credentials between 2018 and 2020. The worst part is such trojan-type malware is available for a price as low as $100, the report mentions. Furthermore, it says that stolen records of UAE residents can cost almost an average of $25 each. Moreover, it is worth noting that the records from the UAE are among the most expensive ones for sale on the dark web.
Credentials From Different Platforms
The malware stole millions of login credentials including emails, usernames, and passwords from the platforms mentioned below:
- Social Media
- Online Gaming
- Online Market
- Job Search
- Consumer Electronics
- File Storage and Sharing
- Streaming Services
- Email Services
- Financial
- Miscellaneous
As per the report, the malware stole credentials from social media platforms like Facebook (1.47 million credentials stolen), Twitter (261,773), and Instagram (153,754). In addition, it also stole credentials from online marketplaces like Amazon (209,534) and eBay (132,935).
The malware also robbed credentials from job search websites like Indeed and Upwork. Moreover, personal information from consumer electronics websites such as Apple, Sony, and Samsung was not spared either.
Book a Free Demo Call with Our People Security Expert
The malware also targeted the credentials from file storage and sharing websites such as Dropbox, and email services companies including Google (1.54 million), Outlook (403,580), and Yahoo (224,961). Records from streaming services such as Netflix and Spotify, also, financial platforms like PayPal and CoinBase were also targeted. Other miscellaneous websites include Adobe, Uber, Skype, and WordPress.
It is reported that more than 50% of the stolen files were text files. The stolen documents database contained more than 650,000 Word documents and .pdf files. Additionally, more than 1 million images were also stolen.