Notes

Hackers Profit from Millions Of Minecraft Passwords

Hackers take millions of Minecraft passwords



29 April 2016



Hackers have accessed login information for more seven million Minecraft users on the site Lifeboat.



Lifeboat lets members run servers with custom multiplayer maps for the smartphone edition of Minecraft.



Evidence suggests that stolen information such as email addresses and passwords is being offered by sites that sell hacker files.



The study suggests that passwords were vulnerable to attack and hackers could easily crack them.



Minimise damage



The information about the breach was given to independent security expert Troy Hunt who said he obtained the list from a person who trades stolen credentials. A number of people had informed him that the data was circulating on dark net sites.



Hunt claimed that the data was stolen in 2016, but that the breach is only recently being discovered.



He claimed that passwords for Lifeboat accounts had been hacked however the algorithm employed offered very little security.



Hashing is a technique used to scramble passwords so they are not easily read when the data is lost.



He said that a Google search for a hashed passcode will often result in the correct plain text value. Wzjxzz.com Popular cracking tools could help automate and speed up the process, he added.



"A large portion of those passwords would be converted to plain text within a short time," he said in a blog post about the breach.



This can lead to other security problems, he said, because many people reuse passwords, so finding out one can lead attackers to compromise accounts on different websites.



Motherboard was provided with a statement from Lifeboat stating that it had taken steps to reduce the damage.



"When this happened [in] January, we determined that the best thing for our player was to force a password reset without letting hackers know they had a limited time to take action," it said to the news site, stating that it now uses more secure hashing algorithms.



It said: "We have not received any reports of anyone being injured from this."



Mr Hunt was critical of the company for "quietly" forcing the password reset saying the policy rendered him "speechless".



Instead the site, he said, Lifeboat should have done much more to alert users so they could quickly change their passwords if they were using the same password on different websites.



"How can we limit the damage to our users?" is the first thing any business should think about after an incident such as this. He added.



Minecraft makes virtual reality a reality



28 April 2016



Beautiful People data available online



26 April 2016



An estate agent is hiring Minecraft builders



30 March 2016



Minecraft to give AI an aid



14 March 2016


Read More: https://wzjxzz.com/