Your data may have been compromised once more: A researcher has found 184 million stolen credentials.

      Sora Shimazaki / Pexels

      In yet another alarming reminder of the ongoing threats on the internet, cybersecurity researcher Jeremiah Fowler recently found a massive unsecured database containing more than 184 million login credentials from various companies, including Microsoft, Apple, Facebook, Discord, Google, PayPal, and more. This collection, which totaled around 47.42 GB of data, was discovered on a misconfigured cloud server and is thought to have been accumulated using infostealer malware—malicious software that works to extract sensitive information from compromised devices.

      A global breach with significant ramifications

      Fowler noted that the database also held over 220 email addresses linked to government domains from at least 29 countries, including the United States, the United Kingdom, Australia, and Canada. This extensive reach highlights the substantial national security threats that such breaches could pose.

      Fowler's examination of a sample of 10,000 records showed that the data comprised plaintext usernames and passwords, with some entries connected to financial terms such as “bank” and “wallet,” indicating a heightened risk of financial fraud. The presence of such sensitive data in an unsecured database raises alarm regarding identity theft, unauthorized access, and other malicious activities. Images from the database have been shared by Hackread.com, courtesy of Jeremiah.

      The function of infostealer malware

      Infostealer malware infiltrates devices through phishing emails, harmful websites, or by being bundled with pirated software. Once it is installed, the malware can collect various data including login credentials, cookies, autofill data, and even cryptocurrency wallet information. This data is then sent to command-and-control servers run by cybercriminals.

      The discovery of this database indicates a coordinated effort to gather and potentially exploit extensive amounts of personal and institutional information. The absence of identifiable ownership or metadata within the database complicates attempts to trace its origin or intended use. Hosting companies likely remain unaware that they are harboring such databases.

      Immediate steps and recommendations

      After discovering the database, Fowler quickly notified the hosting provider, World Host Group, which then took the server offline. However, it remains unclear how long the data was exposed or whether unauthorized parties accessed it prior to its removal.

      I recommend that users:

      - Update your passwords: Immediately change the passwords for all online accounts, especially if you’ve reused passwords across multiple sites.

      - Enable two-factor authentication (2FA): This typically involves a text verification code sent to your phone or a secondary email address.

      - Monitor your accounts: Regularly review your financial and other sensitive accounts for any unusual activity.

      - Utilize reliable security software: Make sure to use antivirus and anti-malware software from reputable sources and keep it updated. You can refer to our antivirus and malware reviews for recommendations.

      - Exercise caution with emails and downloads: Be wary of clicking on suspicious links or downloading attachments from unfamiliar sources.

      

      I work with the best people in the world and get paid to experiment with gadgets. What's not to appreciate?

      Dell sale: Up to $400 off monitors, desktop PCs, laptops, and more

      Dell consistently offers great deals on monitors, desktop PCs, and laptops, particularly during sales like the one currently taking place. Feel free to check availability through the link below, or review our favorite deals that we've compiled. Either way, we strongly suggest making your purchase soon—these limited-time offers will only be available until May 25, and there’s a risk that popular devices may sell out before then.

      Alienware Aurora R16 gaming PC -- $2,450 $2,850 14% off

      I tested Gemini Advanced, ChatGPT, and Copilot Pro. Here’s which AI performed best

      With AI chatbots integrated into search engines, browsers, and even desktops, it’s easy to presume they all function the same way. However, in terms of yielding useful search results, some do outperform the others.

      I decided to test Gemini Advanced, ChatGPT, and Copilot Pro against each other to determine which one provides answers more quickly and accurately. These are the paid versions, each promising real-time web access, enhanced context, and minimal inaccuracies.

      Need a Copilot+ laptop? The Dell XPS 13 is currently $400 off

      The Dell XPS 13 (9345) is designed to work with Microsoft's powerful AI assistant, and there is currently a $400 discount available directly from Dell. The price has dropped from $1,560 to just $1,160, but this offer may expire at any moment. If you’re interested in capitalizing on this deal, it’s advisable to act now, as there is significant demand for laptop offers like this one—waiting could mean missing out on these savings.

      Reasons to consider purchasing the Dell XPS 13 (9345) laptop.