The state of stolen credentials on the Dark Web

By Ian Barker for BetaNews
Wednesday, October 30, 2019

• 2.2k
• 4
• 4
• 4
• 2
• More
• 4
• 4
• 4

In addition, around 42 percent of the stolen passwords analyzed are somehow related either to the victim's company name or to the breached resource in question, making password brute force attacks highly efficient.

"These numbers are both frustrating and alarming," says Ilia Kolochenko, CEO and founder of ImmuniWeb. "Cybercriminals are smart and pragmatic, they focus on the shortest, cheapest and safest way to get your crown jewels. The great wealth of stolen credentials accessible on the Dark Web is a modern-day Klondike for mushrooming threat actors who don't even need to invest in expensive zero-day or time-consuming APTs. With some persistence, they easily break-in being unnoticed by security systems and grab what they want. Worse, many such intrusions are technically uninvestigable due to lack of logs or control over the breached (third-party) systems." Read Full Article