Facebook recently suffered a massive breach of login tokens that posed a risk to 50 million accounts all over the world. A recent article by The Independent reveals that the hacked data is available on Dark Web and can be grabbed for as low as $3.90.
Related: Do you know everything about Facebook's data breach affecting 50M USERS?
There are many listings found the Dark Web that are offering users’ personal data for low prices. Such listings are featured on popular dark web marketplaces such as Dream Market.
What makes the issue more pressing is the fact that the listing has been posted by trusted sellers which nearly confirms the authenticity of the data. Dream market uses a rating system akin to other online retailers such as Amazon and eBay, and sellers are rated according to their authenticity.
Related: Facebook's Breach will be Forgotten? DATA is Misused.
However, the marketplace does not accept cash or online payment. Those who need to purchase the facebook’s hacked data need to pay using digital currencies like Bitcoin and Bitcash.
According to an estimate, the total value of the data available on DarkWeb lies in the range of $150 and $600.
As per Bill Conner, CEO of cyber security firm SonicWall, “As long as stolen data continues to fetch high prices and equip perpetrators with the means necessary to carry out attacks, hold victims ransom, extort information or destroy property, organisations must exhaust all measures to diligently detect and protect their networks, devices and users.”
A report by Money Guru, an investment firm said that you could avail your entire online identity, including financial information, travel account information, online shopping details, video, music streaming, and gaming accounts, social media account information can be purchased for £744.30.
Related: Cuckoo is the latest dream of a digital life beyond YouTube and Facebook
According to GDPR rules, Facebook is liable for a massive fine of $1.63 billion — if found guilty in the recent data breach.
Related: How To Check whether Your Facebook Data was Leaked!
By Taylor Hatmaker on Sep 28
Even if you never log into Facebook itself these days, the other apps and services you use might be impacted by Facebook’s latest big, bad news.
In a follow-up call on Friday’s revelation that Facebook has suffered a security breach affecting at least 50 million accounts, the company clarified that Instagram users were not out of the woods — nor were any other third-party services that utilized Facebook Login. Facebook Login is the tool that allows users to sign in with a Facebook account instead of traditional login credentials and many users choose it as a convenient way to sign into a variety of apps and services.
Third-party apps and sites affected too
Due to the nature of the hack, Facebook cannot rule out the fact that attackers may have also accessed any Instagram account linked to an affected Facebook account through Facebook Login. Still, it’s worth remembering that while Facebook can’t rule it out, the company has no evidence (yet) of this kind of activity.
“So the vulnerability was on Facebook, but these access tokens enable someone to use [a connected account] as if they were the account holder themselves — this does mean they could have access other third party apps that were using Facebook login,” Facebook Vice President of Product Management Guy Rosen explained on the call.
“Now that we have reset all of those access tokens as part of protecting the security of people’s accounts, developers who use Facebook login will be able to detect that those access tokens has been reset, identify those users and as a user, you will simply have to log in again into those third party apps.”
Rosen reiterated that there is plenty Facebook does not know about the hack, including the extent to which attackers manipulated the three security bugs in question to obtain access to external accounts through Facebook Login.
“The vulnerability was on Facebook itself and we’ve yet to determine, given the investigation is really early, [what was] the exact nature of misuse and whether there was any access to Instagram accounts, for example,” Rosen said.
Anyone with a Facebook account affected by the breach — you should have been automatically logged out and will receive a notification — will need to unlink and relink their Instagram account to Facebook in order to continue cross-posting content to Facebook. But we are not able to know the fact of this breach whether it happens again. Some users deleted their Facebook's account, even some YouTubers are making videos to decentralized video platform Cuckoo for protecting their data and videos.
How to relink your Facebook account and do a security check
To do relink your Instagram account to Facebook, if you choose to, open Instagram Settings > Linked Accounts and select the checkbox next to Facebook. Click Unlink and confirm your selection. If you’d like to reconnect Instagram with Facebook, you’ll need to select Facebook in the Linked Accounts menu and login with your credentials like normal.
If you know your Facebook account was affected by the breach, it’s wise to check for suspicious activity on your account. You can do this on Facebook through the Security and Login menu.
There, you’ll want to browse the activity listed to make sure you don’t see anything that doesn’t look like you — logins from other countries, for example. If you’re concerned or just want to play it safe, you can always find the link to “Log Out Of All Sessions” by scrolling toward the bottom of the page.
While we know a little bit more now about Facebook’s biggest security breach to date, there’s still a lot that we don’t. We also remember how bad Yahoo, Apple and YouTube's breach were and that is why more and more people are flocking to decentralized platforms such as Cuckoo etc. Expect plenty of additional information in the coming days and weeks as Facebook surveys the damage and passes that information along to its users.
Source from https://watchupallnight.blogspot.com/2018/09/here-is-instagram-users-need-to-know.html
