Xbox Live accounts hack performed by attackers that hit Krebs and Honan?
Posted on 20 March 2013.
Microsoft has confirmed that a number of Xbox Live accounts of their current and former employees have been compromised by attackers using "several stringed social engineering techniques", but has denied that it stores or in any way utilizes users' Social Security Numbers, The Verge reports.


The attacks have apparently been mounted by the same person(s) that have recently mounted a DDoS attack against the Krebs on Security website and sent a SWAT team to hit the site's owner Brian Krebs.

According to him, a hacker named Phobia and his gamer Team Hype have been angered by his writing about a website that sells access to people's private and financial information, which they regularly use to gather information that helps them hijack Xbox LIVE gamertags (online personas tied to Xbox Live game accounts) and sell them to other players.

The acquired SSNs are apparently used to social engineer phone companies into redirecting the calls made to the number belonging to the targeted individual to one of their own, then calling Xbox phone support to call the number and confirm it. With the one foot in the door, changing passwords for the accounts becomes easy.

Krebs also believes that the hackers behind this attack were the same ones behind the highly-publicized hack of a string of accounts of former Gizmodo and current Wired employee Mat Honan, and the recent DDoS attack that hit Ars Technica.





Spotlight

How to talk infosec with kids

Posted on 17 September 2014.  |  It's never too early to talk infosec with kids: you simply need the right story. In fact, as cyber professionals itís our duty to teach ALL the kids in our life about technology. If we are to make an impact, we must remember that children needed to be taught about technology on their terms.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Sep 19th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //