Posted October 10,2018 in News and Politics.
Facebook Logins FOR SALE ON THE DARK WEB!
Just a couple of days ago,the entire facebook community was baffled by the news that over 50 Million of their Users got hack or rather to say breach.I am very sure you are all aware the feature "VIEW AS" in facebook profiles.
The Facebook CEO,Mark Zuckerberg also not exempted with his Facebook account and other staffs of the said media company.
After that news,another shocking report has come from the dark web itself.
There are some who sells facebook logins for just $3.90 according to researchers.
Does anyone familiar with Dream Market?
Dream market,a famous marketplace in the dark web founded in the year 2013 which sells different stuffs ranging from drugs to stolen personal data and many more.
The researchers/expert who studied compare prices from other marketplaces who offers same contents and get the average price of it.
Here is the prices of some email logins they have researched:
So how to protect your accounts?
One of the methods known is that by using a two-factor authentication where users are asks to both password and an unique key.This is useful for logins in apps where they asked you these data.
Another reminder,never login your account to unknown and untrusted sites.Phishing is one the most used method also.Beware also of apps,before installing be sure check the permissions.
I will include the statement of Mark Zuckerberg to those who are affected by the breach.
THE FULL STATEMENT FROM MARK ZUCKERBERG ON THE
I want to update you on an important security issue we've identified. We patched the issue last night and are taking precautionary measures for those who might have been affected.We're still investigating, but I want to share what we've already found:
On Tuesday, we discovered that an attacker exploited a technical
vulnerability to steal access tokens that would allow them to log
into about 50 million people's accounts on Facebook.
We do not yet know whether these accounts were misused but we are continuing to look into this and will update when we learn more.
We've already taken a number of steps to address this issue:
1. We patched the security vulnerability to prevent this attacker or
any other from being able to steal additional access tokens. And we invalidated the access tokens for the accounts of the 50 million people who were affected – causing them to be logged out. These people will have to log back in to access their accounts again. We will also notify these people in a message on top of their News Feed about what happened when they log back in.
2. As a precautionary measure, even though we believe we've fixed the issue, we're temporarily taking down the feature that had the security vulnerability until we can fully investigate it and make sure there are no other security issues with it. The feature is called 'View As' and it's a privacy tool to let you see how your own profile would look to other people.
3. As an additional precautionary measure, we're also logging out
everyone who used the View As feature since the vulnerability was introduced. This will require another 40 million people or more to log back into their accounts. We do not currently have any evidence that suggests these accounts have been compromised, but we're taking this step as a precautionary measure.
We face constant attacks from people who want to take over
accounts or steal information around the world. While I'm glad we found this, fixed the vulnerability, and secured the accounts that may be at risk, the reality is we need to continue developing new tools to prevent this from happening in the first place. If you've forgotten your password or are having trouble logging in, you can access your account through the @Help Center.
References and Sources:
"The dark side,the hidden side and true side of a human."