Notes

Hackers Profit from Millions Of Minecraft Passwords

Hackers steal millions of Minecraft passwords



29 April 2016



Hackers have accessed login information for more seven million Minecraft users on the site Lifeboat.



Lifeboat lets members run servers that can be customized, multiplayer maps for the smartphone version of Minecraft.



Evidence suggests that stolen information, including passwords and email addresses, is being provided by websites which sell hacked files.



Research suggests that passwords were weakly protected so attackers could easily crack them.



Minimise damage



The information about the breach was shared with independent security expert Troy Hunt who said he received the list from a person who deals in stolen credentials. Many people had told him the data was circulating on dark web sites.



Mr. Hunt said the data was stolen at the beginning of 2016 but the breach has only recently been made public.



He said that passwords for Lifeboat accounts had been hashed but that the algorithm used offered very little security.



Hashing is a method used to encrypt passwords so that they are not easily read when the data is lost.



He said that a Google search for a hashed passcode would often give the exact plain text value. He said that well-known cracking tools could be able to automatize this process and accelerate the process.



"A large portion of these passwords will be converted to plain text in a very short amount of time," he said in a blogpost about the breach.



This can cause other security issues He said this because many people reuse passwords, so that they can be exposed to attackers to compromise accounts on different sites.



Motherboard was supplied with a written statement from Lifeboat which stated that it had taken steps to minimize the damage.



"When this happened in January, we decided the best option for our user was to forcefully and quietly make a password reset without letting hackers know they had limited time to act," it said to the news site, stating that it is now using more secure hashing algorithms.



It stated: "We have not received any reports of anyone being damaged due to this."



Mr. Hunt was critical about the company's policy of "quietly" making the reset of passwords. He said that the policy had made him "speechless".



Instead the site, he said, Lifeboat should have done much more to alert users to change their passwords if they were using the same password on other websites.
https://minecraftservers.pw/


"How can we minimize the damage to our customers?" is the first thing that any company should think about after an incident of this kind. He said.



Minecraft transforms virtual reality into a reality



28 April 2016



Beautiful People data available online



26 April 2016



An estate agent is looking for Minecraft builders



30 March 2016



Minecraft to help AI a helping hand



14 March 2016


Here's my website: https://minecraftservers.pw/