Des milliards de mots de passe désormais disponibles sur les forums clandestins #veille (12 juil 2020)

Hacker leaks passwords for more than 500,000 servers, routers, and IoT devices

The list was shared by the operator of a DDoS booter service.

Billions of passwords now available on underground forums, say security researchers

Usernames and passwords for everything from network administrator accounts and bank details to streaming services and anti-virus software are up for grabs on the dark web – and many are being distributed for free.

North Korean hackers linked to web skimming (Magecart) attacks, report says

After hacking banks and cryptocurrency exchanges, orchestrating ATM cash-outs, and deploying ransomware, North Korean hackers have now set their sights on online stores.

Backdoor accounts discovered in 29 FTTH devices from Chinese vendor C-Data

The backdoor accounts grant access to a secret Telnet admin account running on the devices’ external WAN interface.

Microsoft seizes six domains used in COVID-19 phishing operations

Hackers used malicious Office 365 apps to gain access to customer accounts, which they later used to orchestrate BEC attacks.

Cerberus banking Trojan infiltrates Google Play

The malware was found buried within a seemingly-innocent currency converter.

Amazon tells employees to remove TikTok from their phones due to security risk

Accessing the TikTok website from work laptops is still allowed, according to an internal email Amazon sent to employees today.