Stolen credentials · Dark web · first seen 8 Oct
MediumNeeds reviewOpenNobody has itfix by 7 Dec
Open · no team
It has no team either, so it's waiting on whoever looks first.
One problem in one place, found by dark web.
1 source · 1 place
Dark web
A combo list of 2.1 million email and password pairs, shared on a forum
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
38th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
26 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The post · a combo list of 2.1 million email and password pairs · Thu 8 Oct, 11:00
Open its dark web casec••••@tessellatepay.com : Gr••••••19 s••••@tessellatepay.com : Su••••••!7 … 12 more, from a 2022 breach
Why it matters here
A combo list is for trying the same password everywhere. The two new pairs are what matters: if either password is still in use anywhere at work, it's a way in.
How sure we are
Twelve of the fourteen addresses were in a 2022 breach of an online design tool and are reposted as they were. Two are new, with passwords we haven't seen before.
What to do
What happened, and what was said
1 event · 0 comments · oldest first