Kevin
Administrator
- Joined
- Jul 28, 2008
- Messages
- 7,153
- Location
- Sydney, Oz
- Car Year
- MY'03
- Car Model
- Forester
- Transmission
- A/T
Thanks to an alert from Suparoo:
[FONT="]Including 12.5 million Australian email accounts leaked online[/FONT]
[FONT="]The email addresses of 711 million people have been published online, and include those of 12.5 million Australians.[/FONT]
[FONT="]The personal data has been dumped on a server called Onliner Spambot, which since 2016 has been used to spread malware to steal banking details, and infect people’s computers so they send out viruses and spam (unwanted emails).
The two types of data on the Onliner Spambot server are:[/FONT]
It is thought the email addresses with passwords match those leaked in the 2012 LinkedIn data breach, and that two million addresses come from a Facebook phishing campaign. Some email addresses appear to have been scraped from websites and are incorrect.[/FONT]
[FONT="]Find out if your email address has been breached[/FONT]
[FONT="]To find out if your email address has been published in a data breach, go to https://haveibeenpwned.com and follow the prompts.[/FONT]
[FONT="]What you should do now[/FONT]
[FONT="]If you find that your email has been breached, change your password immediately.[/FONT]
[FONT="]Ways to protect yourself[/FONT]
[FONT="]Including 12.5 million Australian email accounts leaked online[/FONT]
[FONT="]The email addresses of 711 million people have been published online, and include those of 12.5 million Australians.[/FONT]
[FONT="]The personal data has been dumped on a server called Onliner Spambot, which since 2016 has been used to spread malware to steal banking details, and infect people’s computers so they send out viruses and spam (unwanted emails).
The two types of data on the Onliner Spambot server are:[/FONT]
- [FONT="]Email addresses. These are used to send spam and may contain malicious links. For example, one email sent by the server purported to be from Roads and Maritime in NSW and related to E-tags for paying tolls. Because the email looked as if it came from a legitimate source, unsuspecting users could click on the link and go through to a bogus website to pay. [/FONT]
- [FONT="]Email addresses and passwords. These are used to send spam from user accounts using their internet provider’s mail servers so they look genuine and bypass anti-junk measures. [/FONT]
It is thought the email addresses with passwords match those leaked in the 2012 LinkedIn data breach, and that two million addresses come from a Facebook phishing campaign. Some email addresses appear to have been scraped from websites and are incorrect.[/FONT]
[FONT="]Find out if your email address has been breached[/FONT]
[FONT="]To find out if your email address has been published in a data breach, go to https://haveibeenpwned.com and follow the prompts.[/FONT]
[FONT="]What you should do now[/FONT]
[FONT="]If you find that your email has been breached, change your password immediately.[/FONT]
[FONT="]Ways to protect yourself[/FONT]
- [FONT="]Create strong and unique passwords and don’t use the same password for multiple online accounts. [/FONT]
- [FONT="]Use a password manager. [/FONT]
- [FONT="]Understand that scams exist and use caution online. [/FONT]
- [FONT="]Criminals may use information they gather about you from social media in order to make their messages more appealing or appear more authentic. [/FONT]
- [FONT="]Don’t open messages or click on links if you don’t know the sender. [/FONT]
- [FONT="]Avoid malicious messages—don’t share your email address online unless you need to. [/FONT]
- [FONT="]Notify your financial institutions. [/FONT]
- [FONT="]Change your passwords. [/FONT]
- [FONT="]Notify the relevant websites. [/FONT]
- [FONT="]Request a credit report from a reputable credit reference bureau.
[/FONT]