• Brewchin@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    Reads more like an advertorial. Low on detail, high on “passkeys are the future”, and plenty of typos.

  • atrielienz@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    I need more information. How is the malware being distributed to these devices? How can we check if our credentials are in this dump? Shouldn’t the respective platforms be doing due diligence to notify those effected and asking them to change their passwords?

    I feel it may be fairly likely that this inforstealer Malware is the type distributed by dubious apps the play store and similar have had to take down but aren’t actively notifying users who installed them. Is it predominantly phones that are effected or is this malware PC based? Changing your passwords is important but sounding the alarm with no actual information is just… Ill advised. It’s fear mongering.

  • Boddhisatva@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    Aaaah! Act now! Hurry! Change ALL your passwords! Your password was stolen by malware on your device so change it now… on your device… that still has malware… Wait a minute. Shouldn’t this article at least suggest removing the malware first?

  • A_norny_mousse@feddit.org
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    I couldn’t find in the article a list of all platforms affected, only this:

    billions of login credentials from social media, VPNs, developer portals and user accounts for all the major vendors.

    Since I don’t use the big three, I’d be really interested to see a list, before I go through every online account I ever created with a throwaway email.

    • drspod@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      6 days ago

      This article is about credentials that are stolen directly from users’ devices that are compromised with malware. So they will be that user’s passwords for whatever services they were using while infected with the malware. This is why the dumps contain passwords for just about every online service that exists.

      This isn’t an actual database breach of the major providers.

      • A_norny_mousse@feddit.org
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 days ago

        Thanks for clarifying. Still, does this affect every “device” user out there? There must be some sort of explanation here, what’s the attack vector etc. I couldn’t find it even on that Lithuanian guy’s website.

  • drspod@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    If your credentials are in an infostealer dump then you need to make sure that you’ve removed the malware from your device(s) before changing your passwords. Otherwise your new passwords will be sent straight to the same people who got them the first time.

    • Infinite@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      6 days ago

      I don’t know about you, but I have 2 Apple accounts, 2 Facebook accounts, and like 9 Google accounts. I know I’m above average, but it’s not hard to have 1 of each for normal uses.