The Researchers claim that they came to 30 exposed datasets of variable sizes, which contained anywhere between tens of millions to more than 3.5 billion records with accounts from Google, Facebook, Gitbook, Telegram and more. The report also claims that “None of the exposed datasets were reported previously,” Except for the one reported by Jeremiah Fowler, which containted more than 184 million passwords.

“This is not just a leak – it’s a bluprint for mass exploitation. IFT, and what is the structure and the datasets – this is born recycles. Scale ”, added researchers.

And while these newly discovered datasets were just exposed online for a brief period Dataset, but not learn who controlled them.

What information do these datasets contain?

The publication says that the majority of data leaked in the datasets “A mix of details from stealer malware, Credential stuffing sets and repackaged leaks.” And while there is no way to compare these datasets, they likely contained at least some duplicated information. This makes it hard to determine how many people were affecting by the data breach.

However, most of the data in these datasets follow a participular pattern, containing a URL followed by a use and a password. To Those Unaware, This is Exactly How Infostealing Malware Collects Information and Sends It to Threat Actors.

The researchers also find that these these things that these hug datasets are used for using for phishing for phishing campaigns, ransomware intrusions, business email compromise and acute takevovers. These exposed datasets also inscluded tokens, cookies and metadata, which makes them to companies and services that lack multi-factor authentication. Also, some of these they simply named “logins” and “credentials”.

How to Stay Safe If Your Password is leaked?

If you think your system is infected by an infostealing malware, make sure to install a known antivirus and run a thorough security scan to remove it. Users can also make use of Google one’s “dark web report” feature, which check if your personal information has been leaked as part of a data breach on the dark web. Also, make sure that you refrain from using the common passwords like ‘12345678’ and ‘password’ and instead use a combination of numbers and letters to keep your accident.

To give you a quick recap, datasets containing billions of passwords have previously found their way on the internet. Last year, Researchers came across what they called the mother of all breaches, which contained more than 26 billion records.