Notes

Hackers Profit from Millions Of Minecraft Passwords

Hackers take millions of Minecraft passwords



29 April 2016



Hackers have gained access to login data for more seven million Minecraft users on the site Lifeboat.



Lifeboat members can run servers to create custom multiplayer maps for Minecraft's smartphone version.



There is evidence that stolen data, including email addresses and passwords, is being offered on sites that sell stolen data.



The analysis shows that passwords were not adequately secured to allow attackers to easily access them.



Minimise damage



Troy Hunt, an independent security expert, received details about the breach. He claimed to have received the list from a person who deals in stolen credentials. Several people had told him the data was available on dark web sites.



Hunt claimed that the data was stolen in 2016, but that the breach is only recently being discovered.



Passwords for Lifeboat accounts were washed according to the report, but the algorithm used provided little security.



Hashing is a method of encryption that encrypts passwords in order to make it difficult to read in the event that the data gets lost.



In most cases, he said it is the case that a Google search for a password hashed will immediately return the exact plain text value. He added that well-known hacking tools could be able to automate this process and accelerate the process.



He said that "a significant portion of those passwords would need to be converted into plain text in a short amount of time" in a blog post about the breach.



He added that this could lead to additional security issues as many people reuse passwords which means that attackers could figure out which password is being used to hack accounts on other websites.



Motherboard was supplied with a written statement from Lifeboat saying that it had taken steps to reduce the damage.



"When this happened in early January, we decided that the best option for our players was to simply request a password reset without letting hackers know they had limited time to act," it told the news site adding that it is now using more secure hashing algorithms.



It stated that it did not have any reports that anyone was hurt by this.



Mr. Hunt was critical of the company's "quietly" making the password reset. He said that this policy had made him "speechless".
WOLF SCRIPT


He stated that Lifeboat should have been more proactive in advising users to allow them to quickly modify passwords if they were used on other websites.



"The first thing to be on the mind of every company following an incident like this is'How can we minimize the harm to our customers?" He added.



Minecraft transforms into virtual reality



28 April 2016



Beautiful People data sold online



26 April 2016



An estate agent is searching for Minecraft builders



30 March 2016



Minecraft to assist AI



14 March 2016


My Website: https://wolfscript.net/