'Your data is public': Hacker warns victims after leaking 6.8 billion emails online

By Sead Fadilpa?i? published 21 hours ago

Someone posted 150GB of emails to the dark web

Hacker Adkka72424 claims leak of 6.8 billion unique email addresses
Cybernews verified around 3 billion usable emails, archive size 150GB
Massive leak poses phishing and BEC risks through tailored social engineering attacks

A hacker claims to have obtained, and leaked, 6.8 billion unique email addresses - and although the claims are unverified at this time, initial reports indicate at least half of those emails are real.

Researchers at Cybernews recently found a new post on a popular data leak forum created by a hacker with the alias Adkka72424 claiming to have obtained 6.8 billion unique email addresses through different channels - some of which were obtained illegally.

"Two years ago, I obtained more than 3.3 billion unique email addresses.
After a long break, I started this again and spent about 2 months extracting emails from various combos, ULP collections, logs, and databases and extracted 6,839,584,670 unique email addresses," the post reads.

At least half is useful

We don't know if the database is being offered for free, or being sold, but Cybernews says the archive weighs in at 150GB. Analyzing the sample, they said that after removing unusable emails, duplicates, and invalid addresses, some three billion could be useful. This would still put it among the biggest email leaks of all time, and a treasure trove for all hackers engaging in phishing and business email compromise.

"Based on comments on the forum thread, most users are excited about using
the data to check if other leaks contain fresh new data, by comparing entries to this release," Cybernews said. "This allows threat actors to save time
by trying to exploit only newly found leaked accounts."

Many criminals, especially those engaged in social engineering, would profile their victims before attacking. They would look for their workplace, position, working hours, salary, and most importantly - contact information. By combining all these and creating a detailed profile, they are able to create tailored, highly effective phishing emails that can result in credential leaks and fraudulent wire transfers.


https://www.techradar.com/pro/security/your-data-is-public-hacker-warns-victims -after-leaking-6-8-billion-emails-online

$$
--- SBBSecho 3.28-Linux
* Origin: Capitol City Online (1:2320/105)