Spotify offers digital copyright restricted recorded music and podcasts, including more than 82 million songs, from record labels and media companies. ) on the New York Stock Exchange in the form of American depositary receipts. Spotify is listed (through a Luxembourg City-domiciled holding company, Spotify Technology S.A. It is one of the largest music streaming service providers, with over 433 million monthly active users, including 188 million paying subscribers, as of June 2022. Thousands of fake plays generated by these compromised accounts could severely impact Spotify’s ecosystem.Spotify ( / ˈ s p ɒ t ɪ f aɪ/) is a proprietary Swedish audio streaming and media services provider founded on 23 April 2006 by Daniel Ek and Martin Lorentzon. Diachenko says this second leak appears to be from a rival group of hackers.Ĭompromised accounts can be used to built botnets that shadow play music over and over.
Those records included login credentials for hundreds of thousands of Spotify users.
The incident in November involved a misconfigured database with over 380 million individual records. We also worked to have the fraudulent database taken down by the ISP hosting it,” a Spotify spokesperson confirms. “Once we became aware of the situation, we issued password resets to all impacted users, which rendered the public credentials invalid. “We recently protected some of our users against ,” the notice reads.
Spotify directly addressed the researchers’ disclosure via a notice on Twitter. “I have uncovered a malicious Spotify logger database, with 100K account details (leaked elsewhere online) being misused and compromised as part of a credential stuffing attack,” Diachenko tweeted. Researcher Bob Diachenko discovered this latest Spotify attack yesterday. In November, some users received password reset emails for this very issue. This kind of attack is nothing new, and all Spotify can do is reset passwords for affected accounts. If you can’t effectively shut your app down or update your username/password combination, alert Spotify support. If you suspect your account is hacked, log out of Spotify immediately and change your password.
0 kommentar(er)
