Monday, March 8, 2021
  • Setup menu at Appearance » Menus and assign menu to Top Bar Navigation
Advertisement
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News
No Result
View All Result
NikolaNews
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News
No Result
View All Result
NikolaNews
No Result
View All Result
Home Internet Security

Account details for 4 million Quidd users shared on hacking forum

April 14, 2020
in Internet Security
Account details for 4 million Quidd users shared on hacking forum
585
SHARES
3.3k
VIEWS
Share on FacebookShare on Twitter

Quidd, an online marketplace for trading stickers, cards, toys, and other collectibles, appears to have suffered a data breach in 2019, and the details of around four million users are now being shared for free on underground hacking forums.

The data, of which ZDNet has obtained samples from three different sources, contains Quidd usernames, email addresses, and hashed account passwords.

You might also like

Maza Russian cybercriminal forum suffers data breach

Okta and Auth0: A $6.5 billion bet that identity will warrant its own cloud

CISA issues emergency directive to agencies: Deal with Microsoft Exchange zero-days now

A hacker known as ProTag believed to be behind the breach

In the cybercrime landscape, there are different groups and entities, each with different roles. There are hackers, the ones who carry out the actual security breaches, and there are data traders, individuals who engage in selling and re-selling the hacked data.

Two different sources have told ZDNet that a hacker known as ProTag was the one who took credit for the breach and first put the Quidd data for sale.

In addition, ZDNet has also learned from a data trader that the Quidd information has been trading privately among high-level groups for months, with ads for the Quidd info being posted on hacking forums and Pastebin since at least October and December 2019, respectively.


Image: ZDNet

But while the data has traded privately in exclusive rings for months, the Quidd user info has now leaked into the public domain.

This happened last month after a data trader posted a copy of the Quidd data on a publicly accessible hacker forum.

Ever since then, the data has been shared and reshared among other members of the hacking community, constantly re-uploaded on multiple forums.

quidd.png

Image: ZDNet

Quidd has not disclosed any recent security incident, and it is unclear if the company is aware of the breach. ZDNet contacted the company for comment and will update the article with any statement the company wants to make.

ZDNet has also obtained copies of the leaked data and reached out to some users to confirm that their details were correct.

Risk Based Security, who first reported on the Quidd breach on Friday, also said that “after initial testing, the data appears to be valid.”

The only positive in the leaked data is that the passwords were not in plaintext format, but were secured with the bcrypt hashing algorithm.

Reversing bcrypt-protected passwords into their plaintext format is considered incredibly difficult and a time and resource-consuming operation.

Ironically, the use of the bcrypt algorithm is also very likely the reason why the Quidd data has leaked on public hacking forums in the first place.

“It’s bcrypt, so it hasn’t been in high demand really,” a data trader told ZDNet today (quote edited for clarity).

The trader is referring to the fact that spam, malware, and online fraud groups are normally interested in hacked data that contains cleartext passwords, since it’s easier to take over those accounts and carry out their respective spam, malware, and fraud campaigns.

Unfortunately, some hackers have now begun working on cracking the Quidd passwords. One individual is currently selling access to more than 135,000 cracked Quidd passwords, while Risk-Based Security says it’s tracking another individual claiming to provide access to more than one million cracked Quidd accounts.

Quidd users are advised to change account passwords as soon as possible.

quidd-hashed.png

Image: ZDNet

Credit: Zdnet

Previous Post

Hackers Targeting Critical Healthcare Facilities With Ransomware During Coronavirus Pandemic

Next Post

Artificial Intelligence Evolving By Itself - Science news

Related Posts

Maza Russian cybercriminal forum suffers data breach
Internet Security

Maza Russian cybercriminal forum suffers data breach

March 7, 2021
Okta and Auth0: A $6.5 billion bet that identity will warrant its own cloud
Internet Security

Okta and Auth0: A $6.5 billion bet that identity will warrant its own cloud

March 7, 2021
CISA issues emergency directive to agencies: Deal with Microsoft Exchange zero-days now
Internet Security

CISA issues emergency directive to agencies: Deal with Microsoft Exchange zero-days now

March 7, 2021
Linux distributions: All the talent and hard work that goes into building a good one
Internet Security

Linux distributions: All the talent and hard work that goes into building a good one

March 7, 2021
Check to see if you’re vulnerable to Microsoft Exchange Server zero-days using this tool
Internet Security

Check to see if you’re vulnerable to Microsoft Exchange Server zero-days using this tool

March 7, 2021
Next Post
Artificial Intelligence Evolving By Itself – Science news

Artificial Intelligence Evolving By Itself - Science news

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recommended

Plasticity in Deep Learning: Dynamic Adaptations for AI Self-Driving Cars

Plasticity in Deep Learning: Dynamic Adaptations for AI Self-Driving Cars

January 6, 2019
Microsoft, Google Use Artificial Intelligence to Fight Hackers

Microsoft, Google Use Artificial Intelligence to Fight Hackers

January 6, 2019

Categories

  • Artificial Intelligence
  • Big Data
  • Blockchain
  • Crypto News
  • Data Science
  • Digital Marketing
  • Internet Privacy
  • Internet Security
  • Learn to Code
  • Machine Learning
  • Marketing Technology
  • Neural Networks
  • Technology Companies

Don't miss it

Here’s an adorable factory game about machine learning and cats
Machine Learning

Here’s an adorable factory game about machine learning and cats

March 8, 2021
How Machine Learning Is Changing Influencer Marketing
Machine Learning

How Machine Learning Is Changing Influencer Marketing

March 8, 2021
Video Highlights: Deep Learning for Probabilistic Time Series Forecasting
Machine Learning

Video Highlights: Deep Learning for Probabilistic Time Series Forecasting

March 7, 2021
Machine Learning Market Expansion Projected to Gain an Uptick During 2021-2027
Machine Learning

Machine Learning Market Expansion Projected to Gain an Uptick During 2021-2027

March 7, 2021
Maza Russian cybercriminal forum suffers data breach
Internet Security

Maza Russian cybercriminal forum suffers data breach

March 7, 2021
Clinical presentation of COVID-19 – a model derived by a machine learning algorithm
Machine Learning

Clinical presentation of COVID-19 – a model derived by a machine learning algorithm

March 7, 2021
NikolaNews

NikolaNews.com is an online News Portal which aims to share news about blockchain, AI, Big Data, and Data Privacy and more!

What’s New Here?

  • Here’s an adorable factory game about machine learning and cats March 8, 2021
  • How Machine Learning Is Changing Influencer Marketing March 8, 2021
  • Video Highlights: Deep Learning for Probabilistic Time Series Forecasting March 7, 2021
  • Machine Learning Market Expansion Projected to Gain an Uptick During 2021-2027 March 7, 2021

Subscribe to get more!

© 2019 NikolaNews.com - Global Tech Updates

No Result
View All Result
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News

© 2019 NikolaNews.com - Global Tech Updates