An anonymous reader writes: As if 2016 wasn’t shitty enough for Yahoo — which admitted to two separate breaches that saw 500 million users’ and then 1 billion users’ details stolen by hackers — the New York Times reports that a billion-user database was sold on the Dark Web last August for $300, 000. That’s according to Andrew Komarov, chief intelligence office at security firm InfoArmor. He told NYT that three buyers, including two prominent spammers and another who might be involved in espionage tactics purchased the entire database at the aforementioned price from a hacker group believed to based in Eastern Europe. It’s lovely to know that it only costs $300, 000 to be able to threaten a billion people’s online existence — which means each account is only worth $0.0003 to hackers who can ruin your life online in a matter of minutes. Yahoo also doesn’t yet know who made off with all the data from the attack in 2013, which is said to be the largest breach of any company ever. Read more of this story at Slashdot.
Read More:
Yahoo’s Billion-User Database Reportedly Sold On the Dark Web for Just $300,000 – NYT
A total of 32 lakh (3.2 million) debit cards across 19 banks could have been compromised on account of a purported fraud, the National Payment Corporation of India said in a statement. BloombergQuint adds: “The genesis of the problem was receipt of complaints from few banks that their customer’s cards were used fraudulently mainly in China and USA while customers were in India, ” the NPCI said. “The complaints of fraudulent withdrawal are limited to cards of 19 banks and 641 customers. The total amount involved is Rs 1.3 crore as reported by various affected banks to NPCI.” SISA Security, a Bengaluru-based company is currently undertaking a forensic study to identify the extent of the problem and will submit a final report in November. Initial reports had suggested that ATMs operated by Hitachi Payment Services had been attacked by malware and were the source of the breach. However, the company has said in a statement that an interim report by the audit agency does not suggest any breach or compromise in its systems. Read more of this story at Slashdot.
Hulu is eliminating the ad-supported free streaming service it has offered over nearly a decade. The platform is opting instead to team up with Yahoo with a special distribution deal that’s spawning Yahoo View , a new TV streaming service with a small selection of what Hulu previously offered free viewers. Yahoo View will feature the five most recent episodes of shows selected from ABC, NBC and Fox eight days after their original air date. Additional series and a sampling of clips, anime and Korean drama will be made available as well. Yahoo View is available to pore over now if you’re interested in giving it a go over subscribing to Hulu. Going forward the streaming service will continue to offer the same two subscription plans: $7.99 a month with commercials and $11.99 a month without ad-supported viewing. Yahoo is currently being acquired by Verizon as part of a $4.8 billion deal, which isn’t expected to close until the end of 2016 or the first quarter of 2017. The partnership with Hulu should no doubt draw some support for Yahoo, especially since Hulu’s former free content enthusiasts will need to seek a new home for their streaming fix. Via: Variety
An anonymous reader writes from a report via Softpedia: A listing was published today on TheRealDeal Dark Web marketplace claiming to be offering data on over 200 million Yahoo users, sold by the same hacker that was behind the LinkedIn, Tumblr, MySpace, and VK data dumps. In statements to Softpedia, Yahoo said it was investigating the breach, but based on the seller’s reputation, it is very likely the data is authentic. The data is up for sale for 3 Bitcoin (approximately ~$1, 800), and based on the sample the hacker provided, the data dump includes details such as usernames, MD5-hashed passwords, and dates of birth for all users. For some records, there is also a backup email address, country of origin, and ZIP code for U.S. users. The hacker, called Peace, has also told Softpedia that he previously made $50, 000 from the LinkedIn breach alone, and over $65, 000 in total from all breaches. Read more of this story at Slashdot.
An anonymous reader quotes a report from Ars Technica: The Wall Street Journal reports that bids are being accepted for nearly 3, 000 Yahoo patents and pending applications. In April, Yahoo moved 2, 659 patents into a patent-holding company called Excalibur IP LLC, which was seen as a first step toward a patent sale. “This represents a unique opportunity for companies operating in the Internet industry to acquire some of the most pioneering and foundational patents related to Web search and advertising, ” Yahoo said in a statement. Those invited to join the auction include “strategic buyers, private-equity firms, and investment firms focused on intellectual property, ” according to the Journal. Preliminary bids are due by the middle of this month, and the patents are expected to fetch more than $1 billion, according to “people familiar with the matter” who spoke to the Journal. Bloomberg, which also reported on the patent sale, said there was no official reserve price or bidding guidelines. Yesterday, Verizon submitted a $3 billion bid for Yahoo’s core internet business. The sale will include 500 U.S. patents and more than 600 pending applications, but will not include the larger collection of patents going in the patent sale. Read more of this story at Slashdot.