繼臉書(Facebook)之后,超5億領(lǐng)英(LinkedIn)用戶資料又被黑客拿到網(wǎng)上出售,這是上周公布的第二起重大網(wǎng)絡(luò)安全事件。
據(jù)安全新聞和研究機(jī)構(gòu)CyberNews稱,被泄露的大量領(lǐng)英用戶資料包括用戶ID、全名、電子郵件地址、電話號(hào)碼、職務(wù)以及其他相關(guān)工作資料。
CyberNews分析師在一個(gè)黑客論壇上發(fā)現(xiàn)了大量被泄露的資料集,并能夠證實(shí)這些資料為領(lǐng)英用戶的賬戶資料。但這些資料有多舊,以及作惡者是如何獲得這些資料的,目前尚不清楚。
領(lǐng)英在一份聲明中稱,雖然該資料集包含一些“可公開瀏覽的會(huì)員資料”,但“實(shí)際上都是來自一些網(wǎng)站和公司的匯總資料”,也就是說,作惡者用從多個(gè)平臺(tái)搜集的資料創(chuàng)建了該資料集。
領(lǐng)英表示,其并未因黑客侵入公司內(nèi)部資料庫竊取資料而發(fā)生資料泄露。相反,作惡者是從領(lǐng)英對(duì)外開放的服務(wù)中竊取的資料,與臉書近期發(fā)生的網(wǎng)絡(luò)安全事件一樣。
“任何濫用領(lǐng)英會(huì)員資料的行為,例如搜集資料,均違反了領(lǐng)英的服務(wù)條款,”領(lǐng)英在一份聲明中表示。“若任何人未經(jīng)領(lǐng)英及領(lǐng)英會(huì)員同意試圖獲取并使用會(huì)員資料,我們會(huì)竭力阻止他們,并追究他們的責(zé)任。”
盡管被泄露的領(lǐng)英資料集不包括信用卡資料或社會(huì)保障號(hào)等敏感信息,但確實(shí)包含可能有利于作惡者進(jìn)行其他復(fù)雜攻擊的信息。例如,黑客可以利用電子郵件地址和電話號(hào)碼等信息進(jìn)行更加讓人信服的網(wǎng)絡(luò)釣魚攻擊,即向人們發(fā)送看似真實(shí)但卻包含惡意網(wǎng)站鏈接的虛假電子郵件。
人們可以訪問一些列出重大資料泄露事件的網(wǎng)站,如“Have I Been Pwned(HIBP)”,以便了解其是否受到資料泄露事件影響。
本周早些時(shí)候,一位安全研究人員透露,超5億臉書用戶資料遭泄露并被拿到網(wǎng)上出售。這些資料包括用戶全名、電子郵件地址、電話號(hào)碼和位置信息。(財(cái)富中文網(wǎng))
翻譯:郝秀
審校:汪皓
繼臉書(Facebook)之后,超5億領(lǐng)英(LinkedIn)用戶資料又被黑客拿到網(wǎng)上出售,這是上周公布的第二起重大網(wǎng)絡(luò)安全事件。
據(jù)安全新聞和研究機(jī)構(gòu)CyberNews稱,被泄露的大量領(lǐng)英用戶資料包括用戶ID、全名、電子郵件地址、電話號(hào)碼、職務(wù)以及其他相關(guān)工作資料。
CyberNews分析師在一個(gè)黑客論壇上發(fā)現(xiàn)了大量被泄露的資料集,并能夠證實(shí)這些資料為領(lǐng)英用戶的賬戶資料。但這些資料有多舊,以及作惡者是如何獲得這些資料的,目前尚不清楚。
領(lǐng)英在一份聲明中稱,雖然該資料集包含一些“可公開瀏覽的會(huì)員資料”,但“實(shí)際上都是來自一些網(wǎng)站和公司的匯總資料”,也就是說,作惡者用從多個(gè)平臺(tái)搜集的資料創(chuàng)建了該資料集。
領(lǐng)英表示,其并未因黑客侵入公司內(nèi)部資料庫竊取資料而發(fā)生資料泄露。相反,作惡者是從領(lǐng)英對(duì)外開放的服務(wù)中竊取的資料,與臉書近期發(fā)生的網(wǎng)絡(luò)安全事件一樣。
“任何濫用領(lǐng)英會(huì)員資料的行為,例如搜集資料,均違反了領(lǐng)英的服務(wù)條款,”領(lǐng)英在一份聲明中表示。“若任何人未經(jīng)領(lǐng)英及領(lǐng)英會(huì)員同意試圖獲取并使用會(huì)員資料,我們會(huì)竭力阻止他們,并追究他們的責(zé)任。”
盡管被泄露的領(lǐng)英資料集不包括信用卡資料或社會(huì)保障號(hào)等敏感信息,但確實(shí)包含可能有利于作惡者進(jìn)行其他復(fù)雜攻擊的信息。例如,黑客可以利用電子郵件地址和電話號(hào)碼等信息進(jìn)行更加讓人信服的網(wǎng)絡(luò)釣魚攻擊,即向人們發(fā)送看似真實(shí)但卻包含惡意網(wǎng)站鏈接的虛假電子郵件。
人們可以訪問一些列出重大資料泄露事件的網(wǎng)站,如“Have I Been Pwned(HIBP)”,以便了解其是否受到資料泄露事件影響。
本周早些時(shí)候,一位安全研究人員透露,超5億臉書用戶資料遭泄露并被拿到網(wǎng)上出售。這些資料包括用戶全名、電子郵件地址、電話號(hào)碼和位置信息。(財(cái)富中文網(wǎng))
翻譯:郝秀
審校:汪皓
Data from over 500 million LinkedIn users is being sold online to hackers, marking the second major cybersecurity incident to be revealed in the past week, following news of a similar occurrence involving Facebook.
The trove of scraped LinkedIn data includes user IDs, full names, email addresses, phone numbers, professional titles, and other work-related data, according to security news and research group CyberNews.
CyberNews analysts discovered the scraped data set on an online forum for hackers and were able to verify that the data was associated with LinkedIn user accounts. It’s unclear how old the data is, however, and how the bad actors obtained it.
LinkedIn said in a statement that while the scraped data set contains some “publicly viewable member profile data,” it is “actually an aggregation of data from a number of websites and companies,” meaning that bad actors created the data set with information from multiple services.
The service, owned by Microsoft, said that it did not suffer a data breach involving hackers penetrating the company’s internal databases to siphon information. Instead, the bad actors scraped the data from LinkedIn’s public-facing service, similar to a recent cybersecurity incident at Facebook.
“Any misuse of our members’ data, such as scraping, violates LinkedIn terms of service,” LinkedIn said in a statement. “When anyone tries to take member data and use it for purposes LinkedIn and our members haven’t agreed to, we work to stop them and hold them accountable.”
Although the scraped LinkedIn data set doesn’t include sensitive information like credit card information or Social Security numbers, it does include data that could help bad actors perform other sophisticated hacking attempts. For instance, hackers could use data like email addresses and phone numbers to conduct more convincing phishing attacks, in which they send people bogus emails that look real but contain links to malicious websites.
People can see if they have been impacted by the data incident by visiting websites like Have I Been Pwned (HIBP), which list major data breaches.
Earlier this week, a security researcher revealed that data from over half a billion Facebook users was scraped and put online. That data included full names, email addresses, phone numbers, and location information.