Due to the prosperity of the Internet, various picture websites provide copyright-free or sell copyrighted pictures, videos and music materials, allowing everyone to have more channels to legally use them to enrich their own websites or creations. Recently, someone has begun to sell a database containing 8.3 million user records on hacker forums, and it has also been confirmed that user data was leaked from the well-known photo website 123RF.
The well-known photo service 123RF has leaked data and 8.3 million user databases have been sold online.
123RF is a very popular stock photo and material website that sells copyright-free images, videos, and audio for users to use on websites, prints, and videos, according to SimilarWeb According to statistics, this website has more than 26 million visitors every month. Over the weekend, a notorious data breach broker began posting on online forums a database containing 8.3 million user records stolen from the 123RF website during the breach.
From reports by foreign media BleepingComputer, we can see that the stolen information in this database sample includes the full name, email address, MD5 Hash password, company name, phone number, location, PayPal email address (if this payment method is used) and IP address of 123RF members. Fortunately, there is no payment information in this database.
After contacting Inmagine Group, the parent company of 123RF, foreign media confirmed that the server in the company’s data center was compromised by hackers and began copying member information stored in it. According to the information being sold, Inmagine Group stated that the content of this database was last recorded on October 27, 2019, which may be out of date and is not the latest version in 2020. Although the company pointed out that the password part has been encrypted, since the password is an MD5 hash, it is still easy to detect the plain text passwords of many accounts through MD5 online cracking tools.
Inmagine Group said it is currently cooperating with law enforcement and has begun to notify affected 123RF members. It will also strengthen the security of its own services to ensure that the same thing does not happen again. If you are a 123RF user, in order to ensure the security of your account, please immediately change your password to a stronger and more unique one. If you use the original password on other websites, remember to change it at the same time. You must first help yourself before you can expect help from others.
◎Data source:BleepingComputer
Source: KOCPC Chinese