Data of 21 million Mixcloud users put up for sale on the dark web

By -

 Emails, usernames, and strong-hashed passwords sold for $2,000.

A hacker has breached online music streaming service Mixcloud earlier this month, and is now selling the site's user data online, on a dark web marketplace.

The hack came to light on Friday, when the hacker contacted several journalists to share news of the breach and to provide data samples.


Accordig to a sample of the stolen data, the hacker is selling Mixcloud user information that includes details such as usernames, email addresses, hashed password strings, users' country of origin, registration dates, last login dates, and IP addresses.

The breach appears to have taken place on or before November 13, which is the registration date for the last user profile included in the data dump.

Tech news sites TechCrunch and Motherboard also verified the data authenticity through other means, as well.

Mixcloud confirmed the breach in a blog post on Saturday.

The company said that most users had signed up through Facebook, and did not have a password associated with their account.

For those that did, Mixcloud said that passwords should be safe, as each one was salted and passed through a strong hashing function (SHA256 algorightm, accordng to the sample we received), making it currently impossible to reverse back to its cleartext form.

Either way, the company recommended that users reset passwords, just to be safe.

This means that the data advertised on the dark web right now is just a long list of email addresses and uncrackable passwords. The Mixcloud data is currently sold for a price of $2,000.

The hacker behind the Mixcloud breach goes by the name of A_W_S, and has been involved in other hacks together with another hacker known as Gnosticplayers.

He previously claimed responsability in August for hacking Canva (137 million users), Chegg (40 million), Poshmark (36 million), PromoFarma (26 million), RoadTrippers (25 million), StockX (6.8 million), StorEnvy (23 million), and Wirecard Brazil (48 million).

When TechNews asked for proof of the breaches, he only provided user data samples for four -- namely Canva, Chegg, PromoFarma, and RoadTrippers.

Only Canva, Chegg, and StockX publicly acknowledged the breaches. The other five companies did not return a request for comment, sent back in August.

This data, too, had been put up for sale online, on August 5, earlier this year.

Comments

Post a Comment

Popular Posts

Hacker steals data of millions of Bulgarians, emails it to local media

By -
Image
  Source of the data breach appears to be the country's National Revenue Agency A mysterious hacker has stolen the personal details of millions of Bulgarians and has emailed download links to the stolen data to local news publications. The data's origin is believed to be the country's National Revenue Agency (NRA), a department of the Bulgarian Ministry of Finance. In a  message posted on its website  on Monday, the NRA said it was working with the Ministry of the Interior and the State Agency for National Security (SANS) to investigate the hack. "We are currently verifying whether the data is real," said the NRA. Hours after this article's publication, the Bulgarian Ministry of the Interior  confirmed the hack . HACKER STOLE 110 DATABASES, LEAKED 57 According to reports from local media [ 1 ,  2 ,  3 ,  4 ,  5 ], who received part of the data, the hacker said they stole the personal details of over five million Bulgarians, of the country's total populatio
Read more

​Linux totally dominates supercomputers

By -
Image
It finally happened. Today, all 500 of the world's top 500 supercomputers are running Linux. Linux rules supercomputing. This day has been coming since 1998, when Linux first appeared on the TOP500 Supercomputer list . Today it finally happened:  All 500 of the world's fastest supercomputers are running Linux . The last two non-Linux systems, a pair of Chinese IBM POWER computers running AIX, dropped off the  November 2017 TOP500 Supercomputer list . Overall, China now leads the supercomputing race with 202 computers to the US' 144. China also leads the US in aggregate performance. China's supercomputers represent 35.4 percent of the Top500's flops, while the US trails with 29.6 percent. With an anti-science regime in charge of the government, America will only continue to see its technological lead decline. When the  first Top500 supercomputer list was compiled in June 1993 , Linux was barely more than a toy. It hadn't even adopted Tux as its masc
Read more

Microsoft tries to stem its self-made collaboration-tool confusion

By -
Image
Microsoft is using this week's Ignite conference to try to help clarify its collaboration-tool strategy. Here's how SharePoint, Teams and Yammer figure in the mix. Choice is good. But too much choice, especially when it comes to collaboration tools, has been a problem for Microsoft. This isn't news to customers, partners or Microsoft execs themselves. But at the company's Ignite IT Pro conference in Orlando this week, Microsoft execs took a step to try to clarify the company's strategy and messaging in this area. Microsoft Office 365 Marketing chief Ron Markezich kicked off the conference this week with a slide entitled "Microsoft 365 Teamwork: Where to Start a Conversation." That slide attempts to do what  Microsoft initially attempted with a 60-plus-page whitepaper : Clarify which collaboration tools customers should use when. The slide, which features SharePoint -- and its files, sites and content storage at the center -- is broken down into t
Read more