Re:773M Password ‘Megabreach’ Is Years Old
by baseballMan on Friday January 18, 2019 @09:16AM
(#18939409)
The screenshot has a tab open on this article:
https://www.troyhunt.com/the-773-million-record-collection-1...
I don't think it's from the seller - looks like it was taken by the author of this article.
Re:773M Password ‘Megabreach’ Is Years Old
by close04 on Friday January 18, 2019 @09:56AM
(#18939671)
In the screenshot [0] there is also a tab viewing someone's Disqus profile, and you can also see the time and date. I think the suggestion was there may be ways to track down who the hacker is based on this. Of course he could very well be using a VPN (highly likely). Or at the very least a public/free WiFi, although in Russia you have to register with a phone number to access them.
[0] https://krebsonsecurity.com/wp-content/uploads/2019/01/sanix...
Re:773M Password ‘Megabreach’ Is Years Old
by invalidusernam3 on Friday January 18, 2019 @09:57AM
(#18939678)
It addresses that in the article: "...notice the open Web browser tab behind his purloined password trove (which is apparently stored at Mega.nz): Troy Hunt’s published research on this 773 million Collection #1"
Re:773M Password ‘Megabreach’ Is Years Old
by excalibur on Friday January 18, 2019 @11:32AM
(#18940441)
Sooo this is either a screenshot of Sanixer's machine or of someone who has access to his entire trove. Clearly not the author's.
I see the mega.nz handle "Louren KINGUR" with avatar, and the same person's Google account avatar with no username. I did an image search on this latter one and came up empty handed, but maybe someone with more finesse could find him this way.
I'm not familiar with Windows; is there anything in the screenshot to suggest its torbrowser or anything like that?
Presumably the miscreant's ISP and e.g. the Russian government can guess real easy whom generated that screenshot...?
Of course what they'd do with that info is anyone's guess. It could well not be an offence to sell collections of passwords, if in deed its even an offence to hack those passwords in the first place.