[SOT] Dark power of weak passwords :-)

[Andrzej Adam Filip]

https://www.bbc.co.uk/news/technology-62937678

IHG hack: 'Vindictive' couple deleted hotel chain data for fun
; Published 2022-09-17T05:48:49.000Z
Hackers have told the BBC they carried out a destructive cyber-attack
against Holiday Inn owner Intercontinental Hotels Group (IHG) "for
fun".
Describing themselves as a couple from Vietnam, they say they first
tried a ransomware attack, then deleted large amounts of data when
they were foiled.
They accessed the FTSE 100 firm's databases thanks to an easily found
and weak password, Qwerty1234. […]

All SMTP passwords are stronger ;-)

[Randolf Richardson 張文道]

On Sat, 17 Sep 2022 11:57:11 +0200

Post by Andrzej Adam Filip
https://www.bbc.co.uk/news/technology-62937678

IHG hack: 'Vindictive' couple deleted hotel chain data for fun
; Published 2022-09-17T05:48:49.000Z
Hackers have told the BBC they carried out a destructive cyber-attack
against Holiday Inn owner Intercontinental Hotels Group (IHG) "for
fun".
Describing themselves as a couple from Vietnam, they say they first
tried a ransomware attack, then deleted large amounts of data when
they were foiled.
They accessed the FTSE 100 firm's databases thanks to an easily found
and weak password, Qwerty1234. […]

All SMTP passwords are stronger ;-)

With a capital letter Q? They must have had to abide by publicly
published password creation rules, like "at least one upper-case letter,"
some digits, and at least one symbol (e.g., a period).

Sometimes I wonder if such publicly published rules help hackers
to automatically eliminate certain sequences that don't comply, leaving
them with a lower number of total attempts -- that must be a real time-
saver for some account hacking efforts! :O