• BONGO IT BLOG

How Serious Is the Latest Yahoo Hack?

How Serious Is the Latest Yahoo Hack?

Millions of people have recently found out that they not only have a Yahoo account but also that it has been hacked. Many large companies such as BT use Yahoo to base e-mail accounts for their customers. Anyone with an email address ending with "@btinternet.com", "@btopenworld.com" or "@talk21.com" could have been indirectly hacked and their details leaked.

Who And Why?

 

This leak of 500 million accounts was not the first time that Yahoo has been hacked. In fact 200 million accounts had been leaked several months ago. Both of these leaks supposedly come from a breach in security in late 2014. This means that all of the companies, including Sky and BT, that outsourced their webmail hosting to Yahoo have had most of their customer's accounts leaked. The hacker claiming responsibility for the attack is only known as "Peace of Mind". This could be a criminal organisation or group but Yahoo suspects that it could be state-sponsered. This would be much less embarrassing for Yahoo's security team as it means that they would have been outsmarted by some of the best hackers from countries such as Russia or China. Many experts, however, think this is unlikely as it doesn't seem like it could be benificial for any particular country. Constant Karagiannis, chief technology officer of Security Consulting at BT Americas staited that “It [The hack] doesn’t fit the normal intent or objectives of nation-state attacks. It’s not really espionage, it’s not retaliation, sabotage or for financial gain,”.

So why were Yahoo accounts leaked by a potentual hacker named "Peace of Mind"? Peace of Mind has leaked several social media accounts onto the deepweb in the past. This includes MySpace and LinkedIn. The way to make these hacks profitable is to sell them as a data dump on a deepweb website. The 200 Million Yahoo accounts were found being sold by "Peace of Mind" on a site called "The Real Deal". They were being sold all together for 3 Bitcoins. 3 Bitcoins at the time were worth about $1,860 (£1437.83). For just under two thousand dollars you could be the owner of 200 million Yahoo user's personal details. Online newspaper "Motherboard" obtained a small sample of 5000 accounts straight from the seller. They staited that of the 100 emails they tried to use, most of them failed to prove themselves still attached to an account or even legitimate. 

Could this mean that the actual number of accounts leaked is much less that what Yahoo and others believe it to be? Although it is likely that a portion of the accounts are disabled, it is very unlikely that 100% of the accounts are disabled. The best thing that Yahoo, Sky and BT users can do now is reset their passwords along with any security questions or even password hints. Even one of these pieces of data could lead the owner of the datadump back to someone's account.

 

Source Articles:

Millions of BT and Sky Broadband customers could be affected by Yahoo hack

Yahoo faces questions after hack of half a billion accounts

Enjoy the blog post? Then you would love our newsletter! Sign up here Signup and get a free Office 365 pitfall PDF guide

Call us on: 01865 988 217

Follow us here LinkedIn or here Twitter

Is Your Local Police Website Secure?
Customer Feedback - Cowley Road MOTs
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Wednesday, 14 November 2018
  • FREE IT STRATEGY SESSION

  • At Bongo IT, we know that technology is increasingly dominant and crucial to maintaining business performance and productivity.

    Organisations should make sure they are making the right IT decisions for their current needs, whilst also planning for the future with flexible and scalable solutions.

  • As a special offer, we are offering a FREE one hour consultation to address your current IT setup and recommend an effective strategy for your future requirements.

    Addressing issues such as computer hardware, broadband, data security, file sharing, compliance and more, we’ll help you build a plan and ensure you deploy the most cost-effective IT strategy for your company’s needs.

CONNECT WITH US

READ OUR BLOG

You have been running your business / charity / CIC on mostly free software and are getting by, so do you really need to invest in a "centralised system"? ...
As you are probably aware, new laws under the general data protection regulation (or GDPR) are now in full force. In our previous blog we covered two-facto...
Two Factor Authentication (2FA) is a quick and easy way to greatly increase your level of security when logging into your systems. Two factor authenticatio...
Earlier this month Microsoft released a blog explaining that OWA (outlook web app) for mobiles will be shutting down on the 15th of May 2018. "On May 15, 2018, ...
Try Out These Deliciously Entertaining Google Easter Eggs What Is An Easter Egg, Andrew?Good question. An Easter Egg is not only a timely chocola...