RockYou2021, dubbed the largest password data breach in history, is reportedly not a new breach at all, according to PrivacySharks. The compilation of wordlists, probable passwords, and data from previous breaches was posted on a popular hacker forum and caused a flurry of false reporting online. Many outlets, including CyberNews, stated that the list potentially contained all of the worldwide population’s passwords.
However, the cyber panic caused by the alleged data breach was uncalled for. Although the leaker claimed that the leak exposed 82 billion leaked passwords, this isn’t strictly the case. Firstly, there are only 8.4 billion unique entries. Secondly, RockYou2021.txt is a compilation that doesn’t contain any newly compromised passwords; in fact, there is a high possibility that most of the words in the list are not real passwords used by people, making the data insignificant.
Although the collection may contain words that internet users employ as passwords, there is no evidence to suggest that these are connected to breached accounts or are linked with other credentials. Moreover, passwords previously exposed in earlier breaches may be outdated and useless now.
Contains no passwords longer than 20 characters
The probable passwords listed in the file are also limited to 6-20 characters, and any non-ASCII characters were omitted. This means many possible passwords longer than 20 characters were left off of the list, as were words that could be used in international cyberattacks.
More interestingly is the fact that a large part of the compilation comprises of wordlists from the Wikipedia Wordlist and the CrackStation Dictionary. It seems that RockYou2021 is nothing more than a tool to assist password crackers.
Of course, the RockYou2021 compilation is a stark reminder that cyber-attacks occur frequently, and internet users‘ credentials can easily be exposed. However, in this instance, there is little to no need to panic about the so-called biggest breach in history.
Fachartikel
Studien
Studie von Veracode zeigt: 80 % der in EMEA entwickleten Anwendungen weisen Sicherheitslücken auf
GMO GlobalSign Umfrage unter Unternehmen und KMUs zeigt, dass viele nicht auf die PKI-Automatisierung vorbereitet sind
Studie: Sicherheitsbedenken bremsen Tech-Innovation aus
Mainframe-Investitionen zeigen signifikante Dynamik in DevOps, AIOps, mit Fokus auf Sicherheit
Forrester-Report: Unzureichende unternehmensweite Kollaboration erschwert Management des externen Cyber-Risikos
Whitepaper
Incident Response Ransomware Report: KMU am stärksten von Ransomware betroffen
IBM X-Force Report: „Freifahrtschein“ zum Datendiebstahl – Angreifer verwenden gültige Anmeldedaten, um Cloud-Umgebungen zu kompromittieren
Trotz gutem Gehalt: Drei viertel aller IT-Fachkräfte sind wechselbereit
Verizon Business 2023 Payment Security Report: Neue Erkenntnisse zur Optimierung der Zahlungssicherheit
