Hackers Breach Formspring Server, 420,000 Passwords Leaked

<div dir="ltr" style="text-align: left;" trbidi="on"><br />The owners of Formsping – the website where users can “share their perspective on anything” – reset the passwords of all their customers after identifying a data breach that affected one of their servers.<br /><div><br /></div><div><div>As it turns out, the hackers posted around 420,000 password hashes on a forum. Similar to the LinkedIn incident, usernames or other identifying information were not published.</div><div><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtY2wNUNCfuHsgCA_W5emkmS0KqabMK98qN7iuke-DoiUMYG5z4BH05VT47RaJt7dLfTVjtlbiUxEjeVFbWF9sJfVv5ORTRqgfnbeGPyH3oLBETmSbpALbJAHTvju_q2OaCsldTYsrYsnU/s1600/420,000+password+hashes.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtY2wNUNCfuHsgCA_W5emkmS0KqabMK98qN7iuke-DoiUMYG5z4BH05VT47RaJt7dLfTVjtlbiUxEjeVFbWF9sJfVv5ORTRqgfnbeGPyH3oLBETmSbpALbJAHTvju_q2OaCsldTYsrYsnU/s320/420,000+password+hashes.jpg" width="320" /></a></div><div><br /></div><div>Most likely, the cybercriminals were seeking help in decrypting the hashes, especially since they were SHA-256 with random salts.</div><div><br /></div><div>“Once we were able to verify that the hashes were obtained from Formspring, we locked down our systems and began an investigation to determine the nature of the breach,” Ade Olonoh, founder and CEO of Formspring wrote in a blog post.</div><div><br /></div><div>“We found that someone had broken into one of our development servers and was able to use that access to extract account information from a production database.”</div><div><br /></div><div>The security hole that allowed the attackers to gain access to their server has been patched up. Similar to other websites that experienced such data breaches, Formspring has upgraded its password hashing mechanism to decrypt. </div></div><div><br /></div><div><div>In the meantime, users are recommended to check their email inboxes for the password reset notifications. Those who need advice on how to create strong passwords and how to protect them can check out a comprehensive advisory we published recently.</div><div><br /></div><div>Customers who don’t have access to the emails they utilized to register the Formspring account can contact the website’s <a href="https://formspringme.zendesk.com/anonymous_requests/new" target="_blank">support team</a>. </div><div><br /></div><div>Also, this incident might be seen as a good opportunity for cybercriminals to launch a phishing campaign that targets the affected individuals. </div></div></div>

Hackers Breach Formspring Server, 420,000 Passwords Leaked

The owners of Formsping – the website where users can “share their perspective on anything” – reset the passwords of all their customers after identifying a data breach that affected one of their serv…

Read more »

Anonymous Initiates Campaign Against Child Molesters

<div dir="ltr" style="text-align: left;" trbidi="on">Anonymous has launched a video to announce the start of OpPedoChat, a campaign aimed at child molesters.<br />The hacktivists and their supporters want to identify websites that offer “services” to individuals who abuse children.<br /><div class="separator" style="clear: both; text-align: center;"><iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/B6If7vTIf1A?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div><br /><br />“Anonymous aim to diminish if not eradicate this plague from the Internet. For the good of our followers, for the good of mankind, and for our own enjoyment we shall expel from the Internet and systematically destroy any such boards that continue to operate,” the activists said.<br /><br />“Anonymous recognizes this as a serious undertaking and do not expect it to be completed in a short period of time. Factions of Anonymous from all over the globe are participating in sub-operations,” they add.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7sZD0AmEphb6iK8NkIupzQUKoY1ceuNM0_VaPw0mhXKejkG7vWJn7kspe_lo9DJLTWY4VnA6HSw9CKiFG1QNGsBQPG2UE4x-GJcJhHpaozcoEacla8ymykkB-4Y-G2Z1hTy61TbocNUo2/s1600/anonymous-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7sZD0AmEphb6iK8NkIupzQUKoY1ceuNM0_VaPw0mhXKejkG7vWJn7kspe_lo9DJLTWY4VnA6HSw9CKiFG1QNGsBQPG2UE4x-GJcJhHpaozcoEacla8ymykkB-4Y-G2Z1hTy61TbocNUo2/s320/anonymous-3.jpg" width="320" /></a></div><br />This is not the first time we hear that Anonymous attacks molesters, but this time the operation has a name, and it apparently benefits from the support of many. Some other hacking Groups are also taking part in this operation.<br /><div><br /></div><div><span style="background-color: white;">Reference</span> : <a href="http://news.softpedia.com/news/Anonymous-Initiates-Campaign-Against-Child-Molesters-Video-280711.shtml" target="_blank">Link1</a></div></div>

Anonymous Initiates Campaign Against Child Molesters

Anonymous has launched a video to announce the start of OpPedoChat, a campaign aimed at child molesters.The hacktivists and their supporters want to identify websites that offer “services” to individu…

Read more »