Sensitive details on thousands of banking executives lifted from a hacking involving the Federal Reserve represent a potential "bonanza" for spear phishers looking to snare high-value targets in personalized scam e-mails, a security researcher said.
The list is no longer readily available online, but according to Chris Wysopal, CTO of security firm Veracode, it contained details from a Federal Reserve-related database that Anonymous-affiliated hackers claimed to breach on Sunday. It included 31 fields, including home addresses, e-mail addresses, login IDs, and cryptographically hashed passwords.
"As you can see, this is a spearphishing bonanza and even a password reuse bonanza for whoever can crack the password hashes," he wrote in a blog post published on Wednesday. "It doesn’t look like any of these are internal Federal Reserve System accounts as those would have FRS AD UIDs associated with each account. Still, this is about the most valuable account dump by quality I have seen in a while."
Read 2 remaining paragraphs | Comments