Even Script Kids Have a Right to Be Forgotten

[InfoSec News <alerts () infosecnews org>]

http://krebsonsecurity.com/2014/07/even-script-kids-have-a-right-to-be-forgotten/

By Brian Krebs
Krebs on Security
July 18, 2014

Indexeus, a new search engine that indexes user account information 
acquired from more than 100 recent data breaches, has caught many in the 
hacker underground off-guard. That’s because the breached databases 
crawled by this search engine are mostly sites frequented by young 
ne’er-do-wells who are just getting their feet wet in the cybercrime 
business.

Indexeus boasts that is has a searchable database of “over 200 million 
entries available to our customers.” The site allows anyone to query 
millions of records from some of the larger data breaches of late — 
including the recent break-ins at Adobe and Yahoo! – listing things like 
email addresses, usernames, passwords, Internet address, physical 
addresses, birthdays and other information that may be associated with 
those accounts.

Who are Indexeus’s target customers? Denizens of hackforums[dot]net, a 
huge forum that is overrun by novice teenage hackers (a.k.a “script 
kiddies”) from around the world who are selling and buying a broad variety 
of services designed to help attack, track or otherwise harass people 
online.

Few services are as full of irony and schadenfreude as Indexeus. You see, 
the majority of the 100+ databases crawled by this search engine are 
either from hacker forums that have been hacked, or from sites dedicated 
to offering so-called “booter” services — essentially powerful servers 
that can be rented to launch denial-of-service attacks aimed at knocking 
Web sites and Web users offline.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/