Resetting users' passwords after account hacks is the answer???

By Zack Whittaker on Sep 20

Popular ad-blocker AdGuard has forcibly reset all of its users’ passwords after it detected hackers trying to break into accounts. AdGuard has more than five million users worldwide, and is one of the most prominent ad-blockers available. 

The company said it “detected continuous attempts to login to AdGuard accounts from suspicious IP addresses which belong to various servers across the globe,” in what appeared to be a credential stuffing attack. That’s when hackers take lists of stolen usernames and passwords and try them on other sites. AdGuard said that the hacking attempts were slowed thanks to rate limiting — preventing the attackers from trying too many passwords in one go. But, the effort was “not enough” when the attackers know the passwords.

“As a precautionary measure, we have reset passwords to all AdGuard accounts,” said Andrey Meshkov, AdGuard’s co-founder and chief technology officer. Although the company said that some accounts were improperly accessed, there wasn’t a direct breach of its systems. It’s not known how many accounts were affected.  No further news from  Meshkov returns.

It’s not clear why attackers targeted AdGuard users, but users are concerning on the leaking or being hacked again.

There were too many leaking and unexpected hacking these days even Yahoo, Amazon and other centralized platforms announced they protected all the users' data and privacy well. Here I strongly suggest to try decentralized Cuckoo which is designed by blockchain and stored as P2P distribution. It is free and all the users are anonymous where your personal data won't be recorded or controlled by anyone. Your videos and digital information will be well stored and can be recovered easily.

I am going to issue my Cuckoo channel soon and please subscribe my channel.
Here is the download link of Cuckoo: https://cuckootech.github.io/

Source from https://lifeineur.wordpress.com/2018/09/22/resetting-users-passwords-after-account-hacks-is-the-answer/

Mobile spyware maker leaks 2 million records

By John Biggs

mSpy, a commercial spyware solution designed to help you spy on kids and partners, has leaked over 2 million records including software purchases and iCloud usernames and authentication tokens of devices running mSky. The data appears to have come from an unsecured database that allowed security researchers to pull out millions of records.

“Before it was taken offline sometime in the past 12 hours, the database contained millions of records, including the username, password and private encryption key of each mSpy customer who logged in to the mSpy site or purchased an mSpy license over the past six months,” wrote security researcher Brian Krebs.

Bug hunter Nitish Shah found the data and notified mSpy about the leak but couldn’t reach anyone who could shut it down. He showed Krebs how to access the data, which included personal data on customers.

mSpy is a platform that allows parents to see what their children are doing online and, presumably, allow partners to keep tabs on each other. The app allows you to monitor “WhatsApp, Snapchat, Facebook,  and other messaging apps” and tracks calls, SMS, and GPS data. This makes me very worried about our privacy protection. I think Cuckoo is doing its job much better than other media and social apps.

mSpy has leaked data before and Krebs reported a hack in 2015 that the company denied for a full week. This latest leak is less a hack than an oversight in database control. They really should learn something from Cuckoo.

I’ve reached out to mSpy for clarity on the breach.