by Lucian Constantin
In this article “A group of hackers on Thursday published a list of over 453,000 log-in credentials on the Internet that were allegedly stolen from a database associated with an unnamed Yahoo service.
The group of hackers calls itself “the D33Ds Company” and claims to have hacked into the database by exploiting an SQL injection vulnerability found on a Yahoo subdomain.
“The subdomain and vulnerable parameters have not been posted to avoid further damage,” the hackers said in their release notes.
The leaked information includes MySQL server variables, names of database tables and columns, as well as a list of 453,492 email addresses and passwords in plain text.”