Forest Global Training Partners

Cyber Risks · Krebs on Security

The Value of a Hacked Email Account

Summary: Krebs on Security lays out the underground price list for hacked accounts: iTunes credentials sell for $8, FedEx, Continental and United accounts for $6, Groupon for $5, GoDaddy and major wireless carrier logins for $4, and active Facebook and Twitter accounts for $2.50. Because whoever controls an email address can reset the password on nearly every service tied to it, a compromised inbox exposes stored software license keys, cloud storage like Dropbox, Google Drive and SkyDrive, and any backup account used for password resets. The post notes that Gmail, Hotmail/Live and Yahoo now offer multi-step authentication, and that Dropbox, Facebook and Twitter offer additional security options beyond strong passwords.

What you should know: A single inbox is the reset key to every account it touches, and the criminal market prices that access as low as $2.50 - so the question is whether your organization's email accounts are protected by anything more than a password.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related