Above 20 million Gmail and 5 million Yahoo accounts available for sale on the Dark Web
By Prempal Singh
A dealer with the online moniker “SunTzu583” is apparently selling millions of log-in credentials for Gmail and Yahoo accounts on a black market at the dark web. Above 20 million Google mail accounts and 5,000,000 Yahoo accounts are available for sale, the huge trove of data is the result of earlier massive data breaches.
SunTzu583 is known to security experts, he was specialized in someone buy of stolen login credentials.
A couple of weeks before the colleagues at HackRead reported someone buy of more than 1,000,000 Gmail and Yahoo documents by the same owner and some days later, SunTzu583 started selling PlayStation documents.
SunTzu583 offered 640,000 PlayStation accounts for UNITED STATES DOLLAR(USD) 35.71 (0.0292 BTC), the dump includes emails and clear-text security passwords.
SunTzu583 confirmed that the archive has not been directly thieved from PlayStation network, but it does contain unique accounts of PlayStation users. The seller added that even if the documents may work for other web services they can be first of all PlayStation documents.
Returning to the present, the seller SunTzu583 is providing in separate listings a lot of Gmail accounts.
In 3 different listings, he is offering 4,928,888 accounts.
“The total quantity of Gmail accounts being sold are 4,928,888 which have recently been split up into three different listing. All listings contain 2,262,444 accounts including emails and their clear text passwords. ” records the analysis published by HackRead. “In the explanation of these listings, SunTzu583 has mentioned that “Not all these combinations work directly on Gmail, so don’t expect that all these email and security passwords combinations work with Gmail. “”
The researchers at HackRead who have compared the listings with Hacked-DB and Have I been pwned repositories confirmed that the sources of the data are past data removes including LinkedIn (117,000,000 accounts), Adobe (153,000,000 accounts) and Bitcoin Protection Forum (5 million Google mail passwords).
The seller SunTzu583 is offering also another separate listing including additional 21,800,969 Google mail accounts that go for USD 450. 48 (BTC 0.4673). According to the seller, 75% documents contain decrypted passwords while 25% passwords are hashed.
Also in this instance, HackRead verified that the foundation of the data is various data breaches occurred in earlier times, including Nulled. crystal reports breach in May 2016, MPGH. net breach, and Dropbox breach.
The owner is also allegedly providing 5,741,802 Yahoo accounts for $250 (0.2532 Bitcoins).
Most of the accounts listed were not active and the sources may beMyspace .com, Adobe and LinkedIn data breaches.
The dark web dealer warns users that not all the log on credentials work.
Source: securityaffairs.co