711 million data records revealed in spambot dump

The data contains email addresses, passwords and server information too

A huge spam list composed of 711 million records was uncovered last week in the Netherlands.

Troy Hunt, founder of Have I been pwned? (HIBP), was notified of the list through Benkow mouq, a malware hunter, and added it to his website so that users can check if their details are in the list.

In a blog post, Hunt explains how the 711 million records are the largest data set he has loaded into HIBP. He claims: "...that's almost one address for every single man, woman, and child in all of Europe."

Hunt said: "The gap I want to fill here is to explain what I can about the data because there'll be a very large number of people finding themselves on HIBP and wondering what on earth is going on."

Advertisement
Advertisement - Article continues below

He outlines that the listing contains "masses and masses" of email addresses which are used to deliver spam to. He said that "a single file may contain tens or even hundreds of millions of addresses."

In some cases, there are even email addresses and passwords. Hunt's own email address appears in the records twice.

However, even though there are 711 million email addresses, the number of real humans in the data is less as some of the emails have "junk", such as an HTML file name, prefixed to the address. Hunt suggests parsing wasn't done very well because of this.

Hunt also found email addresses which had passwords paired with them. He randomly selected a dozen email addresses, checked them against HIBP, and found that all of them had been exposed in the LinkedIn data breach.

Hunt encountered data from the Exploit.In combo list. "A similar file (with a similar naming structure) contains 4.2 million email address and password pairs, this time with every single account having a hit on the massive Exploit.In combo list," he said. "This should give you an appreciation of how our data is redistributed over and over again once it's out there in the public domain."

One file contains over 3,000 records with email, password, SMTP server and port which Hunt says gives spammers a range of mail servers to send their messages from.

Hunt highlighted the breadth of this breach: "It took HIBP 110 data breaches over a period of two and a half years to accumulate 711m addresses and here we go, in one fell swoop, with that many concentrated in a single location. It's a mind-boggling amount of data."

The largest data set which Hunt had uploaded into the website prior to this was the 393 million records from River City Media in January 2017.

The IP address of the spambot is based in the Netherlands and Hunt and Benkow have been communicating with authorities in order to get it shut down.

Hunt suggests checking HIBP to see whether you have been affected.

Advertisement
Advertisement - Article continues below

It also emerged today that two million customers were hit by a CeX hack. CeX told customers last night that it had been hacked and personal details, such as name, email address, phone number and in some cases passwords, had been accessed. CeX advises customers to change their login details as soon as they can.

Image source: Bigstock

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Recommended

Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/cloud/amazon-web-services-aws/354223/what-to-expect-from-aws-reinvent-2019
Amazon Web Services (AWS)

What to expect from AWS Re:Invent 2019

29 Nov 2019
Visit/hardware/354232/raspberry-pi-4-owners-complain-of-broken-wi-fi-when-using-hdmi
Hardware

Raspberry Pi 4 owners complain of broken Wi-Fi when using HDMI

29 Nov 2019
Visit/mobile/google-android/354189/samsung-galaxy-a90-5g-review-simply-the-best-value-5g-phone
Google Android

Samsung Galaxy A90 5G review: Simply the best value 5G phone

22 Nov 2019