Close

Yahoo! (YHOO) Slumps as Over 400,000 Login Credentials Said to Be Hacked

July 12, 2012 9:44 AM EDT
If you're like most Americans, you enjoy the warm comfort from knowing your account login credentials are safe, whether it be for Google (Nasdaq: GOOG), Facebook (Nasdaq: FB), JPMorgan Chase (NYSE: JPM), Yahoo! (Nasdaq: YHOO)...

Er, about that last one.

According to reports out Thursday, about 453,000 login credentials were posted for hackers in plaintext format.

The "dump" was posted to a hacking site via the hacking collective known as D33Ds Company. D33Ds said it "penetrated the Yahoo subdomain using what's known as a union-based SQL injection." Ars Technica, a website which reports on this sort of thing, said the technique "preys on poorly secured web applications that don't properly scrutinize text entered into search boxes and other user input fields. By injecting powerful database commands into them, attackers can trick back-end servers into dumping huge amounts of sensitive information."

Evidently, Yahoo! was storing the information unencrypted.

No ill intent was made though, with D33Ds simply saying it hoped the exposure would be a "wake-up call" to the parties responsible for managing the data.

Shares of Yahoo! are lower in early trading.


Serious News for Serious Traders! Try StreetInsider.com Premium Free!

You May Also Be Interested In





Related Categories

Insiders' Blog

Related Entities

JPMorgan