Dailymotion forces password reset in response to credential stuffing Attack

Haythem Elmir
0 1
Read Time2 Minute, 0 Second

The popular video sharing website Dailymotion announced that some accounts were accessed by hackers as result of a massive credential stuffing attack.

On Friday, the popular video sharing website Dailymotion announced that some accounts were hit by hackers. The company discovered unauthorized access attempts resulting from credential stuffingactivity. The company blocked the attempts of intrusions and notified them to potentially affect users.

“Dailymotion announces being subject to a large-scale computer attack aimed at compromising the data of its users.” reads the press release published by the firm.

“The attack, which was discovered by Dailymotion technical teams and is still ongoing, was successfully contained following the implementation of measures to limit its scope. Potentially impacted users have been contacted directly by dailymotion to inform them and provide them with personalized support.”

The attempts were observed on January 19 and lasted for at least seven days, the company also notified of the attack to the CNIL (French Data Protection Authority).

After the discovery of hacking attempts, the French firm logged users out and forced a password reset procedure by including in the notification a link to change the password and re-gain access to the account.

Dailymotion

The company has also informed the French Data Protection Authority (CNIL) of the attack, as required by the European Union General Data Protection Regulation (GDPR).

Dailymotion reported that attackers were trying attempting to take over the accounts via brute force attacks or by using stolen credentials obtained from third-party data breaches.

“The attack consists in “guessing” the passwords of some dailymotion accounts by automatically trying a large number of combinations, or by using passwords that have been previously stolen from web sites unrelated to dailymotion.” continues the company.

The security team announced that it is working to improve the protection of its user data.

Unfortunately, it is quite easy to find huge archives available for sale on the Dark Web and use data they contain to carry out credential stuffing attacks.

Recently the popular cyber security expert Troy Hunt revealed the discovery of Collection #1 archive containing 773 million credentials, the huge dump was offered for just $45.

To prevent credential stuffing attacks, users have to choose a unique password for every online service they use and enable two-factor authentication for the account if possible.

Source:https://securityaffairs.co/wordpress/80375/hacking/dailymotion-credential-stuffing.html

Happy
Happy
0 %
Sad
Sad
0 %
Excited
Excited
0 %
Sleepy
Sleepy
0 %
Angry
Angry
0 %
Surprise
Surprise
100 %

Average Rating

5 Star
0%
4 Star
0%
3 Star
0%
2 Star
0%
1 Star
0%

Laisser un commentaire

Next Post

Facebook Paid Teens $20 to Install 'Research' App That Collects Private Data

If you are thinking that Facebook is sitting quietly after being forced to remove its Onavo VPN app from Apple’s App Store, then you are mistaken. It turns out that Facebook is paying teenagers around $20 a month to use its VPN app that aggressively monitors their smartphone and web […]