Inside the Massive 711 Million Record Onliner Spambot Dump

[V_R]

Last week I was contacted by someone alerting me to the presence of a spam list. A big one. That's a bit of a relative term though because whilst I've loaded "big" spam lists into Have I been pwned (HIBP) before, the largest to date has been a mere 393m records and belonged to River City Media. The one I'm writing about today is 711m records which makes it the largest single set of data I've ever loaded into HIBP. Just for a sense of scale, that's almost one address for every single man, woman and child in all of Europe. This blog posts explains everything I know about it.

Continue reading:
https://www.troyhunt.com/inside-the-massive-711-million-record-onliner-spambot-dump/

Check if you're on the list here: https://haveibeenpwned.com/

 

[muckshifter]

... 711m records ...

... and that's just the ones they know about.

 

[nivrip]

How long did that take to download?

 

[floppybootstomp]

I don't suppose typing in your email address to check if you're on 'the list' effectively harvests it?

 

[Ian]

And these are only the ones we know about . More important than ever to have unique passwords.

I don't suppose typing in your email address to check if you're on 'the list' effectively harvests it?

That's always a risk, but I think this one is legit. I've signed up anyway, on balance it's more useful to know where breaches occur.

 

[Abarbarian]

oh no what to do panic panic

 

[V_R]

For those worried about the HIBP site:
https://en.wikipedia.org/wiki/Have_I_Been_Pwned?

...and the guy behind it:
https://en.wikipedia.org/wiki/Troy_Hunt