Millions of mixtape fans could be at risk of being hacked

Millions of mixtape fans could exist at risk of being hacked

(Image credit: Shutterstock)

The account credentials and emails of nearly 7.5m users of the mixtape hosting service DatPiff have been made available to download for free on a popular hacking forum.

Kickoff launched in 2005, DatPiff has over 15m users though the service as well allows unregistered users to download or upload samples for gratis.

While it'south all the same unclear as to exactly when DatPiff suffered a information breach, the site's database was first sold privately and then publicly on hacking forums get-go in July of 2020 according to a new report from BleepingComputer.

In full, the stolen DatPiff database contains vii,476,940 fellow member records including the email addresses, passwords, usernames and security questions of its users.

Croaky passwords

Beginning in November, another cybercriminal began selling the DatPiff database on the same hacking forum. This time though, the records information technology contained were dehashed to include both users' plain-text passwords and email addresses. However, someone else took things a step further by releasing the database for free allowing anyone to download and employ the information it contains for a diversity of malicious activities.

The reason the passwords in the database were able to exist cracked is because DatPiff hashed them using the older and now obsolete MD5 algorithm which was first developed in 1992. MD5 passwords tin can be dehashed by comparing hashes to known MD5 worldlists or by using nifty tools in an endeavour to animate being strength the passwords.

In December of last yr, BleepingComputer was informed that an aggressor was able to breach DatPiff'south website past using a vulnerability scanner that allowed them to admission a server with an quondam database backup.

Although DatPiff has yet to release a statement or notify its users by email regarding the incident at the time of writing, anyone with an account on the site should modify their password immediately and consider using a password generator to create strong passwords every bit well every bit a password manager to store them deeply.

We've also featured the best identity theft protection , all-time antivirus and best firewall

Via BleepingComputer

After living and working in South korea for seven years, Anthony now resides in Houston, Texas where he writes about a variety of engineering science topics for ITProPortal and TechRadar. He has been a tech enthusiast for as long as he can remember and has spent countless hours researching and tinkering with PCs, mobile phones and game consoles.