What Happens When Google Doc Credentials Are Leaked On the Dark Web? (csoonline.com) 27

Posted by timothy on Monday February 22, 2016 @11:22AM from the nothin'-good dept.

itwbennett writes: It only takes one day of online credentials being available on the Dark Web before login attempts will start, according to security company Bitglass, which set up a simulation using fake credentials for a Google Drive account, complete with real credit card details, fake corporate data and personal data, according to Bitglass' report. Bitglass said there were three attempted logins to Google Drive in the first day and five attempted logins to the fake bank site. Within two days, files were downloaded from the Google Drive account.

What Happens When Google Doc Credentials Are Leaked On the Dark Web?

This discussion has been archived. No new comments can be posted.

Load All Comments

Search 27 Comments Log In/Create an Account

Comments Filter:

Your point? (Score:4, Informative)

by jason777 ( 557591 ) writes: on Monday February 22, 2016 @11:36AM (#51559105)

So? Then dont leak personal details. Why wouldnt you expect people to try it?

- Re: (Score:2)
  
  by Cryacin ( 657549 ) writes:
  
  But, it's the DARK WEBS man. That always strikes fear into the hearts of the uninitiated.
  - Re: (Score:2)
    
    by malditaenvidia ( 4015209 ) writes:
    
    Imagine having a website on the internet that is NOT listed by search engines by means of an arcane file called robots.txt! Too damn spooky.
Bored Teenager Finds Car Keys. Goes For Drive. (Score:2)

by zenlessyank ( 748553 ) writes:

So you are saying that folks that are criminals who specialize in ID fraud will use an ID that isn't their for nefarious deeds? I guess you will tell us soon that blind people don't need lights in their house or paralyzed folks don't climb mountains.
the same thing that happens with all Google info (Score:2)

by turkeydance ( 1266624 ) writes:

and MS and Facebook and
Scareware! (Score:2)

by s.petry ( 762400 ) writes:

The Bitglass article want's a sign up, no thanks. The CSO article will have to suffice.
They gave credentials away, then make it sound like 3-5 attempts to login or see something was a big deal, with exposed credentials.
The tracking document is interesting, but outside of that no big deal. I'd have to see what they were able to track to have more than passing interest. I would probably be disappointed though, which is why details were not present for that bit.
- Re: (Score:2)
  
  by SQLGuru ( 980662 ) writes:
  
  They want you to sign up because they need more credentials to leak on the DARK NET.
Are you seriously suggesting (Score:3)

by Maritz ( 1829006 ) writes: on Monday February 22, 2016 @11:46AM (#51559189)

That if you post your login and password to Google Drive on the dark web/Tor hidden services, people will try to login to your shit? I don't fucking believe it.

I don't get the siginificance (Score:5, Interesting)

by gatfirls ( 1315141 ) writes: on Monday February 22, 2016 @11:49AM (#51559209)

It seems to me like a local news story where they leave a bike to be stolen in an area that is known for it and acting like it's news that people...try to steal the bike.
Seems like it would be more interesting if they made some sort of honeypot with something they would want like a CC list or something that has a good password and see if/when people get in without social engineering etc.

The real news here (Score:2)

by Lab Rat Jason ( 2495638 ) writes:

... is that _only_ 5-6 people tried to access it... basically you created a honey pot that teased out the script kiddies, while the professionals saw it and thought "no way this is legit."
HOLY CRAP! (Score:2)

by Lumpy ( 12016 ) writes:

So using the dark web as my storage place for personal things like logins is not a good idea? WHY DID NOBODY TELL ME!
Tomorrow on Slashdot, Experiments shows that humans can not breathe under water, and electrical outlets have electricity in them.
- Re: (Score:2)
  
  by belthize ( 990217 ) writes:
  
  Technically the experiments only show that a subset of the population can't breath under water under some circumstances. I suspect more research is needed.
- Re: (Score:2)
  
  by Trax3001BBS ( 2368736 ) writes:
  
  So using the dark web as my storage place for personal things like logins is not a good idea? WHY DID NOBODY TELL ME!
  Not the Dark Web but a cloud which is no-brainer.
more interesting if & when owners were informe (Score:2)

by sittingnut ( 88521 ) writes:

what is the story here? there is no interesting story if finders use content of a purse with id, credit cards, and money, left unattended in a public place(esp in a unsavory place),
much more interesting story would be if anyone informed the account owners about the information leak and when(similar to finders returning the purse unused)
Tor or not? (Score:2)

by Shadow IT Ninja ( 3891909 ) writes:

TFA says "...68 percent of those who accessed the Google Drive account used Tor. Still, that leaves more than a third who didn't take any protections to mask their real IP address..."

So does this really mean that the other 32% didn't mask their IP address at all or did they use some other method besides Tor?
- Re: (Score:2)
  
  by tnk1 ( 899206 ) writes:
  
  The other third were kiddies, or they were taking other means than TOR to protect themselves.
  In fact, I'd almost be more worried about the people who didn't use TOR, because TOR itself is probably not trusted by the best people. You'll trace some of the non TOR logins back and find some grandmother who has had her PC thoroughly hacked and under the remote control of someone else using a "proprietary" channel.
What Happens When Google Doc Credentials Are Leake (Score:2)

by Mantrid42 ( 972953 ) writes:

Exactly what you'd expect?
Google already lets you protect yourself (Score:3)

by Solandri ( 704621 ) writes: on Monday February 22, 2016 @02:13PM (#51560731)

Just enable 2-factor authentication on your Gmail/Google account [authy.com]. (Note: I linked to Authy because I recommend it over Google Authenticator. Authy requires you to enter a passcode or password to view an authentication code. Authenticator will just spit out the authentication code if you're in possession of the account owner's device. Kinda defeats the purpose if you're trying to protect yourself if your phone should be stolen.)

No need to log-in to BitGlas for Report (Score:2)

by Trax3001BBS ( 2368736 ) writes:

BitGlass industry http://pages.bitglass.com/Proj... [bitglass.com]
For full report which is a youtube video scroll down to resources http://www.bitglass.com/resour... [bitglass.com]
- Re: (Score:2)
  
  by Trax3001BBS ( 2368736 ) writes:
  
  BitGlass industry http://pages.bitglass.com/Proj... [bitglass.com]
  For full report which is a youtube video scroll down to resources http://www.bitglass.com/resour... [bitglass.com]
  Log-in anyhow? Share your account http://bugmenot.com/ [bugmenot.com]

There may be more comments in this discussion. Without JavaScript enabled, you might want to turn on Classic Discussion System in your preferences instead.

What Happens When Google Doc Credentials Are Leaked On the Dark Web? (csoonline.com) 27

What Happens When Google Doc Credentials Are Leaked On the Dark Web? More Login

What Happens When Google Doc Credentials Are Leaked On the Dark Web?

Your point? (Score:4, Informative)

Re: (Score:2)

Re: (Score:2)

Bored Teenager Finds Car Keys. Goes For Drive. (Score:2)

the same thing that happens with all Google info (Score:2)

Scareware! (Score:2)

Re: (Score:2)

Are you seriously suggesting (Score:3)

I don't get the siginificance (Score:5, Interesting)

The real news here (Score:2)

HOLY CRAP! (Score:2)

Re: (Score:2)

Re: (Score:2)

more interesting if & when owners were informe (Score:2)

Tor or not? (Score:2)

Re: (Score:2)

What Happens When Google Doc Credentials Are Leake (Score:2)

Google already lets you protect yourself (Score:3)

No need to log-in to BitGlas for Report (Score:2)

Re: (Score:2)

Related Links Top of the: day, week, month.

Slashdot Top Deals

Slashdot