Post Now
Image

The virtual world was thrown into mayhem when the internet giant Yahoo disclosed a three-year-old massive data breach at their network. Personal details of more than One Billion user accounts compromised, which is the largest data breach reported by any company ever.The attackers quietly scooped up the data, which includes names, passwords, date of birth and contact numbers. The hackers also acquired the backup email addresses and security questions used to reset lost passwords. Millions of the backup addresses belonged to military and civilian government employees from dozens of nations, including more than 150,000 Americans.The hacker group behind the Yahoo data breach sold the database of an over-a-billion user for $300,000 on the Dark Web in the last August. Andrew Komarov, Chief Intelligence Officer (CIO) at the security firm, InfoArmor told the New York Times that the three buyers, including two "prominent spammers" and a third individual who is believed to be involved in espionage tactics, paid $300,000 to gain control of the entire database.That database of 1 billion Yahoo accounts is still for sale, although the price has been dropped to $20,000 since the data is much less valuable now that Yahoo has already triggered the reset of passwords.“A billion user accounts details means attackers have a golden key for new phishing attacks,” said former analyst at the National Security Agency. In a phishing attack, a hacker often present as a trusted contact and tries to prompt the email recipient to click on a malicious link or share sensitive information. More on Email Phishing:Anatomy-of-email-phishingYahoo users are strictly advised to change their passwords and invalidate the security questions as the first step of precaution.If you are Yahoo user and using the same password and answers to security questions somewhere else, you are urged to change them at the earliest. Users usually ignore advice to use different passwords for their various accounts across the web, which means a stolen Yahoo username and password could open the door to more sensitive information in online banking, corporate or government email accounts.