Slashdot Mirror


Study Finds Hundreds of Stolen Data Dumps

Steve writes "SecurityFix reports that a group of researchers from Germany published a study in which they analyzed several hundred so-called 'drop zones,' i.e. anonymous collection points of illicitly collected data stolen with the help of keyloggers. 'Their findings, which drew from stolen data harvested from these drop zones between April and October 2008, were staggering: 33 gigabytes worth of purloined data from more than 170,000 victims. Included in those troves were more than 10,700 online bank account credentials, 149,000 stolen e-mail credentials, 5,682 credit card numbers, and 5,712 sets of eBay credentials. [...] Using figures from Symantec's 2007 study on the prices that these credentials can fetch at e-crime bazaars, the researchers estimate that a single cyber crook using one of these kits could make a tidy daily income. The full report [PDF] contains some more interesting details.'"

9 of 58 comments (clear)

  1. And a.... by Anonymous Coward · · Score: 2, Funny

    "10,700 online bank account credentials, 149,000 stolen e-mail credentials, 5,682 credit card numbers, and 5,712 sets of eBay credentials."

    *sings* And a partridge in a pear tree...

  2. Re:Yep. We're vulnerable. by Thanshin · · Score: 2, Funny

    Indeed.

    However I don't really mind that they sell all info regarding Mr. X Smith, who currently lives in n123 Candy st. / Magicland.

  3. Re:How are they storing this data? by diskis · · Score: 4, Funny

    Raw data from keyloggers?
    I think gamers can quickly fill up 138kB with lots of w,s,a and d keypresses :)

  4. Re:Yep. We're vulnerable. by sakdoctor · · Score: 4, Funny

    I feel sorry for bob@aol.com, the real resident of 123 Fake street, and the unlucky person who got the telephone number 01234567890

  5. Re:Yep. We're vulnerable. by morgan_greywolf · · Score: 5, Funny

    Hey! Those are BOTH ME, you insensitive clod!

    -- Bob <bob@aol.com>
    (012) 345-6789

  6. Re:Yep. We're vulnerable. by achenaar · · Score: 3, Funny

    That depends if you're referencing WTC or the Winsock Error 10048 - Address already in use.
    Personally, I quite like the irony of the Winsock Error one.

  7. Re:How are they storing this data? by Da+Fokka · · Score: 3, Funny

    Hahaa! That's why I use asdfasfd as my online banking password.

  8. New Passwords by Xandar01 · · Score: 2, Funny

    >Modern keyloggers use algorithms and/or regex to find certain data like credit card numbers or email addresses and some even specifically filter out "wasd" patterns.

    Then make all your passwords "wasd" derivatives!

    --
    Life moves pretty fast; if you don't stop and look around once in a while, you could miss it. -FB
  9. Re:Yep. We're vulnerable. by Anonymous Coward · · Score: 1, Funny

    thats why all of my passwords are "wasd123"

    Not your slashdot password...