Hackers Smuggle Millions Of Minecraft Passwords
from web site
Hackers take millions of Minecraft passwords
29 April 2016
Hackers have accessed login data for more seven million Minecraft users on the site Lifeboat.
Lifeboat members can run servers to create custom maps of multiplayer for Minecraft's smartphone edition.
There is evidence that stolen information, including email addresses and passwords, is available on websites that sell stolen data.
Analyses show that passwords were not adequately secured so that hackers could easily find them.
Minimise damage
Troy Hunt, an independent security expert, received information regarding the breach. He claimed he obtained the list from someone who deals in stolen credentials. He was told by several individuals that the data was being circulated via dark web sites.
Mr. https://occities.org/ Hunt said that the data was stolen in early 2016, but the breach has only now come to light.
He stated that passwords for Lifeboat accounts had been hacked however the algorithm employed offered only a small amount of protection.
Hashing is a method that encrypts passwords in order to make it difficult to read in the event that the data gets lost.
He said that a Google search for a hashed passcode will often return the exact plain text value. He added that well-known hacking tools could be able to automate this process and speed it up.
He also stated that "a large percentage of these passwords will have to be converted into plain text within a short period of time" in a blog post about the breach.
This can lead to other security problems, he said, because many people reuse passwords, so that they can be exposed to attackers to hack accounts on other sites.
Motherboard was supplied with a written statement from Lifeboat which stated that it had taken the necessary steps to minimize the damage.
"When this happened in early January we figured the best option for our players was to simply force a password reset without letting the hackers know they had a limited time to take action," it told the news site, adding that it is now using more secure hashing algorithms.
It stated that it did not have any reports that any person was injured due to this.
Mr Hunt was critical of the company for "quietly" forcing the password reset saying this policy made him "speechless".
He suggested that Lifeboat could have been more proactive in notifying users so that they could swiftly change passwords if they used on other websites.
"The first thing a business should consider following an incident such as this is "How can we minimize the damage to our customers?" He added.
Minecraft leaps into virtual reality
28 April 2016
Beautiful People data sold online
26 April 2016
An estate agent is looking for Minecraft builders
30 March 2016
Minecraft to give AI assistance
14 March 2016
