Feeds

Symantec finds fat cache of swiped gaming logins

Crooks deploy cloud-based password verification factory

The Power of One Infographic

Security researchers Symantec have unearthed a monster cache of 44 million stolen gaming account and website login credentials.

The haul, thought to have been harvested using Trojans with information stealing capabilities, took in data associated with a variety of online games and websites.

Hackers had set up a system so that the relevant login details were checked using a botnet of PCs compromised with the Loginck Trojan, a strain of malware distinct from those that steal passwords and login details in the first place.

The approach allowed cybercrooks to check whether accounts were valid or not before selling them via gaming websites. The approach allowed hackers to build up a 17GB stash of compromised accounts alongside extremely useful sales data such as gaming levels, all without breaking a sweat. Accounts that have reached higher levels of a game are worth far more than those of newbies.

By using a distributed system of thousands of PCs rather than a handful of machines, crooks effectively avoid hitting blacklisting problems that would result from multiple-login failures from the same machine.

Trojans that steal banking login credentials get the most press, but those targeted at online gamers are also a big problem, particularly in the far east, as Symantec's research illustrates. A detailed write-up of the find can be found in a blog post here. ®

Top three mobile application threats

More from The Register

next story
NEW Raspberry Pi B+, NOW with - count them - FOUR USB ports
Composite vid socket binned as GPIO sprouts new pins
Child diagnosed as allergic to iPad
Apple's fondleslab is the tablet dermatitis sufferers won't want to take
Microsoft takes on Chromebook with low-cost Windows laptops
Redmond's chief salesman: We're taking 'hard' decisions
For Lenovo US, 8-inch Windows tablets are DEAD – long live 8-inch Windows tablets
Reports it's killing off smaller slabs are greatly exaggerated
Seventh-gen SPARC silicon will accelerate Oracle databases
Uncle Larry's mutually-optimised stack to become clearer in August
EU dons gloves, pokes Google's deals with Android mobe makers
El Reg cops a squint at investigatory letters
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.