jimmyLi's blog

Account details for millions of players have been stolen in a hack attack on Blizzard, the maker of World of Warcraft, StarCraft and Diablo.   Blizzard revealed details of the breach in a message posted to its Battle.net account management service. Players in North America should change their login details for the account management service, said Blizzard. So far, it said, there was no evidence that credit card numbers and other personal details had been taken. Angry gamers In the message, Blizzard boss Mike Morhaime said it discovered on 4 August that there had been "unauthorized and illegal access" to its internal network. Its investigation into the breach revealed that whoever broke in got a copy of a list of all email addresses for Battle.net users outside China. Battle.net is the overarching account management and login service gamers use to play Blizzard games including World of Warcraft, StarCraft 2 and Diablo 3. Also accessed was informa...

CyberZeist , the hacker who has recently left the UGNazi collective, has leaked a few hundred login credentials that he allegedly obtained by launching a spear phishing attack on US   federal employees.   “This federal account release is not a result of some fancy and HiFi hack, it’s a result of a common flaw in human factor – Trust. These all federal accounts were jacked by using a simple method known as 'Spear Phishing'! These accounts are just a half part of a forthcoming #gov #leak,” he wrote next to the data dump. The leak contains over 250 record sets comprising email addresses and clear text passwords. According to the hacker, he obtained the credentials by spoofing a login portal. “They have a login portal at [.mil domain] (intranet only). Their SSLv2 certificate can be spoofed easily so I replaced the original certificate with my fake one so that users can’t make out that they are logging at a fake portal,” the hacker told Softpedia. “In my f...

The site of London 2012 Rentals and the one of Big Dance 2012 have been breached by a hacked called Sniper (5NiP3R). A total of around 12,500 account details have been leaked, Cyberwarnews.info reports.    From London 2012 Rentals, a website that provides rental offers for those who plan on attending the London 2012 Olympic Games, the hacker stole around 5,000 usernames, emails and clear text passwords and posted them on peoplesliberationfront.net . Judging by the second data leak, The Big Dance 2012 database contained a number of 7,500 account details, including email addresses, unique IDs and encrypted passwords. We urge all internauts who have utilized these sites to immediately change all their passwords. This is not the first time when the Big Dance website is breached. Back in February, a hacker called Chriss10011 of TheAdipiscing crew  leaked user details from bigdance2010.com. We have contacted both London 2012 Renta...

Have you had to change your login information in a paranoid fever after discovering that a major online service provider has been hacked in the last few weeks? Well, if you have a Yahoo! account, you might have some worrying to do. A hacker group called D33DS Company has apparently dumped 453,492 usernames and passwords obtained in plaintext from a Yahoo! service. Ars Technica is reporting that usernames and passwords allegedly from Yahoo! were posted online by the D33DS Company group. Other sources indicate that the user information was specifically from the Yahoo! Voice service, formally known as Associated Content. Apparently, the hackers were able to obtain the plaintext list of passwords and usernames using a MySQL injection attack. Ars explains the methodology behind the attack thusly: The hacking technique preys on poorly secured web applications that don’t properly scrutinize text entered into search boxes and other user input fields. By injecting powerful ...

LinkedIn yesterday confirmed that there was a breach of security, and that member passwords were dumped by the attackers. The password hashes have been posted on the Internet in a 250 Megabyte text file, and it is generally assumed that people have started to break the hashes to reveal the underlying passwords. All in all, about 6.5 million LinkedIn user accounts are affected by this. LinkedIn itself has taken counter measures to protect affected users accounts from being compromised. Probably the biggest protection in this regard is that affected account passwords have been invalidated, so that they can’t be used anymore to log in to LinkedIn. All affected members will receive an email from LinkedIn that contains instructions on how to reset the account passwords. LinkedIn notes that these emails will not contain links, to avoid copy cat emails that use this for phishing. It basically comes down to reseting the user account password to receive a new one. Affected mem...