Facebook, Twitter and Google: Hackers steal millions access - STERN.DE

hackers have targeted many passwords for user accounts. © Boris Roessler / DPA

D atenklau in a big way: are some two million access data found by the IT security company Trustwave in an illegal database been. Most affected are users of social networks – especially Facebook. Trustwave had discovered the data in the so-called Pony-botnet. In the illegal botnet is a network of thousands of computers that can be controlled from a central location. The Sneaky mind: the owner of the computer does not usually know that they are part of this network. Access is via malicious software that allows hackers to take control of the most personal computer – so data can be stored, for example, without knowledge of the owner

.

Facebook and Co. are powerless

against the attack

In a similar way, the access data found were captured by the hackers: A program called a keylogger is installed it unnoticed by the owner on a computer – it’s possible for example by sending infected emails. The software then records in the background on everything that is entered from the keyboard. The program also recognizes whether it is access to a specific web pages or applications and save the entries sorted neatly on a computer from the botnet. Hackers can freely access the affected accounts now.

From the discovered data can be around 57 percent of Facebook, Yahoo ten percent, nine percent and three percent Google Twitter assign. Furthermore, among the illegal access data stored user names and passwords of 320,000 e-mail accounts. Site operators such as Facebook are powerless against this type of theft: “The credentials could not be stolen by a mistake of their respective companies,” says Abby Ross, a spokeswoman for Trustwave over the Internet magazine “Mashable”. The credentials were captured directly from the users’ computers without Facebook and it would be able to influence.

Many passwords are not sure

Facebook has announced that it will inform all affected users. At the same time, the company, to enable the options “Login Notifications” and “Login Approvals” under the security settings to be informed of requests from unknown browsers recommends. Google and Twitter have not yet expressed.

The data also show: Although the Internet is now an integral part of everyday life, some users continue to use insecure passwords. Many WOULD CHOOSE easy to remember passwords safe letter and number combinations before, writes Trustwave. The ten most common passwords are around 1.8 per cent of all hacked accounts to use. Among these combinations, such as “1234″ or “password”.

How can you protect yourself?

general rule is that you should consider a few basic rules for secure passwords. In addition, it should be obvious to use a topical anti-virus program to detect malicious software on your own computer quickly. Since no one can be sure if his credentials were stolen, it is also recommended to change the passwords on all existing accounts.