{"id":17345,"date":"2016-12-15T08:08:49","date_gmt":"2016-12-15T08:08:49","guid":{"rendered":"http:\/\/www.biphoo.com\/bipnews\/?p=17345"},"modified":"2016-12-15T08:08:49","modified_gmt":"2016-12-15T08:08:49","slug":"yahoo-says-1-billion-accounts-were-hacked-in-2013","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/business\/yahoo-says-1-billion-accounts-were-hacked-in-2013.html","title":{"rendered":"Yahoo says 1 billion accounts were hacked in 2013"},"content":{"rendered":"
\n

Yahoo says 1 billion accounts were hacked in 2013<\/span><\/strong><\/span><\/h2>\n

Yahoo says 1 billion accounts were hacked in 2013:-<\/strong> Yahoo, already reeling from its September disclosure that 500 million user accounts had been hacked in 2014, reported Wednesday that a different attack compromised more than 1 billion accounts in 2013.<\/span><\/p>\n

The two attacks are the largest known security breaches of one company\u2019s computer network.<\/span><\/p>\n

The 2013 attack involved sensitive user information, including names, telephone numbers, dates of birth, encrypted passwords, and unencrypted security questions that could be used to reset a password.<\/span><\/p>\n

Yahoo said it is forcing all of the affected users to change their passwords and invalidating unencrypted security questions \u2014 steps that it declined to take in September.<\/span><\/p>\n

It is unclear how many Yahoo users were affected by both attacks. The Internet company has more than 1 billion active users, but it is not clear how many inactive accounts were hacked.<\/span><\/p>\n

Yahoo said it discovered the larger hacking after analyzing data files, provided by law enforcement, that an unnamed third party had claimed contained Yahoo information.<\/span><\/p>\n

Yahoo has made a steady trickle of disclosures about the 2014 hacking, which it has been investigating with the help of federal authorities. The company said Wednesday that it now believes the attacker in that breach, which it says was sponsored by a government, found a way to forge credentials to log in to some users\u2019 accounts without a password.<\/span><\/p>\n

Bob Lord, Yahoo\u2019s chief information security officer, said in a statement that the state-sponsored actor in the 2014 attack had stolen Yahoo\u2019s proprietary source code.<\/span><\/p>\n

Outside forensics experts working with Yahoo believe that the state-sponsored hackers used Yahoo\u2019s code to access Yahoo user accounts without their passwords by creating forged \u201ccookies,\u201d short bits of text that a website can store on a user\u2019s machine. By forging these cookies, attackers were able to impersonate valid users, gaining information and performing actions on behalf of their victims.<\/span><\/p>\n

Security has taken a back seat at Yahoo in recent years, compared to Silicon Valley competitors like Google and Facebook. Yahoo\u2019s security team clashed with top executives, including the chief executive, Marissa Mayer, over the cost and customer inconvenience of proposed security measures.<\/span><\/p>\n

Security experts also say the time it has taken Yahoo to uncover the breach disclosed Wednesday is a signal that the company\u2019s security and monitoring technologies are inadequate.<\/span><\/p>\n

\u201cWhat\u2019s most troubling is that this occurred so long ago, in August 2013, and no one saw any indication of a breach occurring until law enforcement came forward,\u201d said Jay Kaplan, the chief executive of Synack, a security company. \u201cYahoo has a long way to go to catch up to these threats.\u201d<\/span><\/p>\n

In July, Yahoo agreed to sell its core businesses to Verizon Communications for $4.8 billion. Verizon said in October that it might seek to renegotiate terms of the transaction because of the hacking, which had not been disclosed to Verizon during the original deal talks.<\/span><\/p>\n

After the disclosure on Wednesday, a Verizon spokesman, Bob Varettoni, essentially repeated that position.<\/span><\/p>\n

\u201cAs we\u2019ve said all along, we will evaluate the situation as Yahoo continues its investigation,\u201d he said. \u201cWe will review the impact of this new development before reaching any final conclusions.\u201d<\/span><\/p>\n

Lord said Yahoo had taken steps to harden its systems following the attacks. The company encouraged its users to change passwords associated with their Yahoo account and any other digital accounts tied to their Yahoo e-mail and account.<\/span><\/p>\n

In the hacking disclosed Wednesday, Lord said Yahoo believed an \u201cunauthorized third party\u201d managed to steal data for 1 billion Yahoo user accounts. Lord said that Yahoo had not been able to identify how the hackers breached Yahoo\u2019s systems, but the company believed the incident occurred in August 2013.<\/span><\/p>\n

Changing Yahoo passwords will be just the start for many users. They will also have to comb through other services to make sure passwords used on those sites are not too similar to what they were using on Yahoo. And if they were not doing so already, they will have to treat everything they receive online, such as e-mails, with an abundance of suspicion, in case hackers are trying to trick them out of even more information.<\/span><\/p>\n

Yahoo recommended that customers use Yahoo Account Key, a tool that verifies identity using a mobile phone and eliminates the need to use a password on Yahoo altogether.<\/span><\/p>\n

Security experts say the latest discovery of a breach that happened so long ago is another black mark for the company.<\/span><\/p>\n

\u201cIt\u2019s not just one sophisticated adversary that gets in,\u201d said Ben Johnson, cofounder and chief security strategist at Carbon Black, a Waltham, Mass., security company. \u201cTypically, companies get compromised multiple times due to the same vulnerability or employee culture.\u201d<\/span><\/p>\n

Johnson added that the scale of the breaches is only increasing as companies store more and more troves of information in similar databases.<\/span><\/p>\n

\u201cWhen you have these huge databases of information, it\u2019s millions \u2014 and now billions \u2014 of accounts lost,\u201d he said.<\/span><\/p>\n

Source:-\u00a0https:\/\/www.bostonglobe.com\/business\/2016\/12\/14\/yahoo-says-billion-accounts-were-hacked\/3bO4FsTNacgEDv8WJPJDWM\/story.html<\/span><\/div>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t