Database leak exposed a large amount of credential stuffing for Spotify users – Illinoisnewstoday.com

Researchers helped Spotify detect and address serious credential stuffing operations that affect hundreds of millions of users.

On July 3, VpnMentor’s research team, led by Ran Locar and Noam Rotem, discovered a database hosted on an unprotected host. Elasticsearch server And although it was suspected to be part of the qualification cramming process, its origin has not yet been identified.

The 72GB database contains more than 380 million Spotify user records, including sensitive data such as username / password, email ID, country of residence, and other Spotify users’ PII (personally identifiable information). Was included.

Owned by a hacker: Database leaked with 100,000 hacked Facebook accounts

Approximately 300,000 to 350,000 users may have been affected by this campaign. However, rResearchers couldn’t determine how scammers were able to target Spotify user data. They pointed out that hackers may have used credentials stolen from other platforms such as apps and websites to access their Spotify accounts.

In addition, researchers have identified some server IP addresses that are part of the data breach. However, these addresses primarily belonged to the proxy server of the network operator where the database was hosted.

Researchers claim that the data breach was not due to Spotify because the database belonged to a third party that legally or illegally obtained Spotify login credentials and saved them to perform the credential stuffing operation. I am.

Screenshot of published data (credit: vpnMentor

Credential stuffing is a technique by which a hacker uses a weak password to launch an attack and target your site. VpnMentor notified Spotify on July 9, 2020. The company responded quickly and confirmed that the database was actually being used by individuals or groups of scammers to exploit Spotify and its users.

According to VpnMentor Blog post, Spotify has also started a “rolling reset of passwords” for all affected users, so the information in that database is no longer useful.

look: Hackers claim to have leaked thousands of Spotify login credentials

If the database is discovered by a threat actor, it could easily sell Spotify Premium Account Access or use the data to launch subsequent phishing or identity theft attacks.

Therefore, users should be aware of the importance of having strong and unique passwords for all accounts. It is imperative to enable MFA (multi-factor authentication) when possible.

Did you enjoy reading this article?Please like the page Facebook And follow us twitter..