Dirt-Cheap, Legit, Windows Software: Pick Two
Summary: A KrebsOnSecurity reader bought Microsoft Office 2016 Professional Plus from an eBay seller for under $4, and the seller then emailed a shared Office 365 username and password rather than an activation key, with roughly 350 other buyers having made the same purchase from that seller in the past year. The buyer could not change the account's email address or username because the administrator had locked it down, and the installation defaulted to signing in to a 5TB Microsoft OneDrive account while the seller retained control over apps including OneNote and Class Notebook.
Key Takeaway: The account owner keeps control of the email address tied to the license, so whoever holds it can assume control of any licenses and data synced to that OneDrive - and most buyers, the reader notes, just click next and stay signed in.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026