Over-leakage of passwords and logins: see how ABES members can alert their employees

 

The ABES Cyber Risk and Security Committee identified that users from several Brazilian companies had their passwords compromised in a large leak that took place on the dark web on 12/12, when a security company located a file with approximately 1.4 billion Stolen logins and passwords. 
 
“This file basically contains credentials – paired with email address and password – used by users of online services such as LinkedIn, Netflix, Last.FM, MySpace, Minecraft and others. However, the big problem in this case is the fact that most people use the same password in other services”, explains Roberto Gallo, PhD, committee coordinator and CEO of Kryptus Information Security. Criminals also know this and use this type of information to carry out attacks.
 
Therefore, if the ABES member wants to know if the employees of his company have been affected, Kryptus has made himself available to carry out a free search of this material. Just send an email to cyber@kryptus.com. “It is important to identify if there are affected users in your organization and ask them to change their passwords on all critical services they use, such as internet banking”, adds Roberto.
 
See another article about this leak on here and the alert made by the president of ABES, Francisco Camargo, in article “The virtual world is as dangerous as the real one – Brazilians need to be aware of digital security”.