Xbox Live accounts hack performed by attackers that hit Krebs and Honan?
Posted on 20 March 2013.
Microsoft has confirmed that a number of Xbox Live accounts of their current and former employees have been compromised by attackers using "several stringed social engineering techniques", but has denied that it stores or in any way utilizes users' Social Security Numbers, The Verge reports.


The attacks have apparently been mounted by the same person(s) that have recently mounted a DDoS attack against the Krebs on Security website and sent a SWAT team to hit the site's owner Brian Krebs.

According to him, a hacker named Phobia and his gamer Team Hype have been angered by his writing about a website that sells access to people's private and financial information, which they regularly use to gather information that helps them hijack Xbox LIVE gamertags (online personas tied to Xbox Live game accounts) and sell them to other players.

The acquired SSNs are apparently used to social engineer phone companies into redirecting the calls made to the number belonging to the targeted individual to one of their own, then calling Xbox phone support to call the number and confirm it. With the one foot in the door, changing passwords for the accounts becomes easy.

Krebs also believes that the hackers behind this attack were the same ones behind the highly-publicized hack of a string of accounts of former Gizmodo and current Wired employee Mat Honan, and the recent DDoS attack that hit Ars Technica.





Spotlight

Emerging cloud threats and how to address them

Posted on 15 September 2014.  |  Public and community clouds can be appealing targets for hackers looking to disrupt or steal information from scores of organizations with one successful strike. Here are some emerging security threats and issues cloud providers and their clients should be aware of.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Sep 16th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //