Cyber Risks · Krebs on Security

How Cybercrooks Put the Beatdown on My Beats

Summary: An Amazon merchant's seller account was hijacked when its email address was changed overnight, locking the legitimate owner out for a week while fake electronics were listed at steep discounts with fake tracking numbers. Krebs reports that SLILPP, a crime shop, advertises more than 340,000 Amazon account username and password pairs for sale at about $2.50 each, part of a broader inventory of over 7.1 million credentials from hundreds of bank and e-commerce sites.

Why it matters: Hacked Amazon seller accounts have sold underground for roughly half the price of a coffee, and the credential-testing crews feeding that market work from breach lists like the 427 million credentials posted from Myspace - meaning your users' reused passwords are already inventory.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related