Feeds

Symantec finds fat cache of swiped gaming logins

Crooks deploy cloud-based password verification factory

Beginner's guide to SSL certificates

Security researchers Symantec have unearthed a monster cache of 44 million stolen gaming account and website login credentials.

The haul, thought to have been harvested using Trojans with information stealing capabilities, took in data associated with a variety of online games and websites.

Hackers had set up a system so that the relevant login details were checked using a botnet of PCs compromised with the Loginck Trojan, a strain of malware distinct from those that steal passwords and login details in the first place.

The approach allowed cybercrooks to check whether accounts were valid or not before selling them via gaming websites. The approach allowed hackers to build up a 17GB stash of compromised accounts alongside extremely useful sales data such as gaming levels, all without breaking a sweat. Accounts that have reached higher levels of a game are worth far more than those of newbies.

By using a distributed system of thousands of PCs rather than a handful of machines, crooks effectively avoid hitting blacklisting problems that would result from multiple-login failures from the same machine.

Trojans that steal banking login credentials get the most press, but those targeted at online gamers are also a big problem, particularly in the far east, as Symantec's research illustrates. A detailed write-up of the find can be found in a blog post here. ®

Intelligent flash storage arrays

More from The Register

next story
Microsoft to enter the STRUGGLE of the HUMAN WRIST
It's not just a thumb war, it's total digit war
Tim Cook: The classic iPod HAD to DIE, and this is WHY
Apple, er, couldn’t get the parts for HDD models
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Caterham Seven 160 review: The Raspberry Pi of motoring
Back to driving's basics with a joyously legal high
Back to the ... drawing board: 'Hoverboard' will disappoint Marty McFly wannabes
Buzzing board (and some future apps) leave a lot to be desired
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Business security measures using SSL
Examines the major types of threats to information security that businesses face today and the techniques for mitigating those threats.