Information Security News mailing list archives
After account hacks, Twitch streamers take security into their own hands
From: InfoSec News <alerts () infosecnews org>
Date: Thu, 2 May 2019 05:59:10 +0000 (UTC)
https://techcrunch.com/2019/04/30/twitch-account-hacks/ By Zack Whittaker TechCrunch April 30, 2019 Twitch has an account hacking problem.After the breach of popular browser game Town of Salem in January, some 7.8 million stolen passwords quickly became the weakest link not only for the game but gamers’ other accounts. The passwords were stored using a long-deprecated scrambling algorithm, making them easily cracked.
It didn’t take long for security researcher and gamer Matthew Jakubowski to see the aftermath.
In the weeks following, the main subreddit for Amazon-owned game streaming site Twitch -- of which Jakubowski is a moderator -- was flooded with complaints about account hijacks. One after the other, users said their accounts had been hacked. Many of the hijacked accounts had used their Town of Salem password for their Twitch account.
Jakubowski blamed the attacks on automated account takeovers — bots that cycle through password lists stolen from breached sites, including Town of Salem.
"Twitch knows it’s a problem -- but this has been going on for months and there’s no end in sight," Jakubowski told TechCrunch.
[...]
-- Subscribe to InfoSec News https://www.infosecnews.org/subscribe-to-infosec-news/ https://twitter.com/infosecnews_
Current thread:
- After account hacks, Twitch streamers take security into their own hands InfoSec News (May 01)