Nameless Malware data breach: 1.1M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-06-09
In January 2021, NordLocker provided HIBP 1.1 million email addresses collected by nameless malware. The malware campaign ran between 2018 and 2020 and infected 3.25 million computers, stealing files, credentials and taking screenshots and photos using the computer's webcam. Read more in NordLocker's writeup about the Nameless malware that stole 1.2 TB of private data. Exposed data: email addresses. The breach dates from Jan 1, 2020; Have I Been Pwned loaded it on Jun 9, 2021.
What to do
- If you had a Nameless Malware account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch
