Weak Passwords: Weak passwords are easy-to-guess passwords.
As LastPass puts it, “these passwords are at risk because of known data breaches elsewhere on the web.” LastPass tracks when websites experience breaches and, if you haven’t changed your passwords since a website experienced a problem, it recommends you change the password for that website in that specific section.
There are four types of passwords: Compromised, weak, reused, and old. Under “Improve Your Score,” the LastPass Security Challenge will recommend which passwords you should change. A plaintiff identified as “John Doe” claims criminals have used the stolen data to break into his LastPass account and steal his private Bitcoin keys, worth $53,000.Compromised, Weak, Reused, and Old Passwords Last week in Boston federal court, LastPass was hit with a lawsuit related to the breach. Whenever they succeed, they’ll have full access to any information inside, including credit card numbers, bank account data, or medical records. And with the information in their possession they can take their time, testing one set of digital locks after another like a burglar rattling doorknobs. But they can use password-cracking programs to try and guess the master passwords for each vault. Because LastPass stores vault data in encrypted form, those who stole it can’t easily read it, at least not right away. Worse yet, the intruders were also able to steal the customers’ “vault data” - the encrypted files containing passwords and other sensitive data stored by LastPass’ 33 million subscribers. In a December 22 posting, Toubba said the attackers had also managed to steal an employee’s login credentials, thereby gaining access to “basic customer account information and related metadata including company names, end-user names, billing addresses, email addresses, telephone numbers, and the IP addresses from which customers were accessing the LastPass service.” Related : Despite LastPass hack, cybersecurity experts say to stick with password managersīut now, LastPass is singing a different tune.
0 kommentar(er)
