Jackson has spent time with hacking groups including New World Hackers and Lizard Squad-two groups known for large and disruptive, albeit often relatively harmless, cyberattacks. The server, accessible by invitation only, is used by hackers to communicate, trade tips, tools and other information. Jackson said he found the tool in a private server on Discord-a popular, free online communications platform used primarily by gamers. The ability to crack accounts en masse makes Spotify Cracker an imminent threat to Spotify’s more than 140 million active users, including more than 60 million paying subscribers who have credit card or PayPal information associated with their account that could be compromised. He said in about 15 minutes, he was able to crack 100 accounts. Jackson said he found some emails and passwords in a file on Pastebin-a temporary and anonymous service that allows people to host text for free-and ran those in the tool. Since many people use the same password for multiple sites, a breach from one service can result in a person having multiple accounts compromised. Those logins are bought and sold online and occasionally can be found floating around for free.
The tool can then be used to compromise those accounts, both free and Premium memberships.īecause of the number of breaches that have occurred in the past, there are massive lists of email addresses and passwords associated with those accounts available online. Jackson shared with IBT a video of the tool in action, in which it appeared to identify several accounts and revealed the passwords in plaintext.Īccording to Jackson, the Spotify Cracker tool works by plugging in login credentials, which are then used to find a Spotify account associated with the address. The tool, called “Spotify Cracker v1,” was described by Jackson as a brute force hacking tool that allows hackers to hijack large numbers of Spotify accounts.
The discovery of the tool, made by Collective Labs CEO Ryan Jackson, coincides with a recent increase in reports on social media of Spotify accounts being hacked - though Spotify itself has not suffered a direct security breach, according to the company. A security researcher has discovered a hacking tool that groups of hackers are using to compromise Spotify accounts, International Business Times has learned.
0 kommentar(er)
