Pages

Wednesday, December 30, 2009

Over 32 million accounts have been compromised (the result of an attack on the RockYou.com site)

It was discovered that the hacker under the pseudonym "igigi" managed to compromise the database of users of the web site RockYou.com via classical SQL Injection exploitation. The portal RockYou.com offers various services to social networks such as Facebook and MySpace. Igigi describes in detail the conducted attack in his blog. The most valuable data received by the hacker is the database of users consisting of 32’603’388 records:


Depersonalized database (without usernames, emails, and other sensitive information) was kindly downloaded to rapidshare.com, but has been already removed from there and is now available only on torrents. It should be mentioned that this incident got into the TOP5 of the greatest information leakages for the past year.

The RockYou team apologized to their users and assured them that the incident didn’t affect the privacy of their financial information. It was also reported that the vulnerabilities will be eliminated and henceforth the security issues will be attended much more carefully (compliance with industry standards in information security, applying best practices, etc.). However, information protection is based today on the principle "one vulnerability eliminated, another one forgotten".


Well, let us return to the information leakage.

Yours truly couldn’t help trying to get hold of such an interesting password database, which is now roaming in our boundless space. Thus, I present to your attention the analysis of a scope of 32’603’388 passwords.

The results for the symbol set used (charset) are the following:


Here is a graph of the length of passwords used by foreign users:


Below is the most interesting thing - TOP500 of the most widespread passwords from the compromised database of RockYou.com (password - percentage %):

  1. 123456 - 0,8917%
  2. 12345 - 0,2425%
  3. 123456789 - 0,2355%
  4. password - 0,1900%
  5. iloveyou - 0,1583%
  6. princess - 0,1081%
  7. rockyou - 0,0693%
  8. 1234567 - 0,0666%
  9. 12345678 - 0,0630%
  10. abc123 - 0,0538%
  11. nicole - 0,0527%
  12. daniel - 0,0503%
  13. babygirl - 0,0494%
  14. monkey - 0,0469%
  15. jessica - 0,0465%
  16. LOVELY - 0,0459%
  17. michael - 0,0457%
  18. ashley - 0,0439%
  19. 654321 - 0,0429%
  20. qwerty - 0,0425%
  21. iloveu - 0,0419%
  22. michelle - 0,0414%
  23. 111111 - 0,0407%
  24. 000000 - 0,0400%
  25. tigger - 0,0381%
  26. password1 - 0,0367%
  27. sunshine - 0,0367%
  28. chocolate - 0,0363%
  29. anthony - 0,0357%
  30. angel - 0,0345%
  31. FRIENDS - 0,0344%
  32. soccer - 0,0342%
  33. butterfly - 0,0338%
  34. jordan - 0,0336%
  35. purple - 0,0336%
  36. liverpool - 0,0321%
  37. justin - 0,0317%
  38. loveme - 0,0311%
  39. fuckyou - 0,0308%
  40. football - 0,0303%
  41. andrea - 0,0298%
  42. carlos - 0,0298%
  43. jennifer - 0,0295%
  44. joshua - 0,0294%
  45. secret - 0,0294%
  46. 123123 - 0,0292%
  47. superman - 0,0281%
  48. bubbles - 0,0281%
  49. hannah - 0,0280%
  50. amanda - 0,0278%
  51. andrew - 0,0273%
  52. loveyou - 0,0272%
  53. pretty - 0,0270%
  54. tweety - 0,0270%
  55. basketball - 0,0269%
  56. angels - 0,0267%
  57. 1234567890 - 0,0266%
  58. flower - 0,0263%
  59. elizabeth - 0,0258%
  60. PLAYBOY - 0,0257%
  61. TINKERBELL - 0,0254%
  62. hello - 0,0254%
  63. samantha - 0,0252%
  64. jasmine - 0,0251%
  65. charlie - 0,0251%
  66. brandon - 0,0251%
  67. hottie - 0,0249%
  68. chelsea - 0,0248%
  69. teamo - 0,0246%
  70. barbie - 0,0245%
  71. lovers - 0,0244%
  72. melissa - 0,0239%
  73. shadow - 0,0238%
  74. danielle - 0,0237%
  75. robert - 0,0237%
  76. matthew - 0,0236%
  77. EMINEM - 0,0233%
  78. 666666 - 0,0228%
  79. forever - 0,0227%
  80. family - 0,0225%
  81. JONATHAN - 0,0224%
  82. vanessa - 0,0216%
  83. dragon - 0,0215%
  84. naruto - 0,0212%
  85. computer - 0,0211%
  86. cookie - 0,0211%
  87. whatever - 0,0210%
  88. summer - 0,0207%
  89. spongebob - 0,0207%
  90. junior - 0,0206%
  91. joseph - 0,0205%
  92. 987654321 - 0,0204%
  93. sweety - 0,0204%
  94. taylor - 0,0201%
  95. lauren - 0,0199%
  96. daniela - 0,0199%
  97. jesus - 0,0198%
  98. princesa - 0,0198%
  99. mickey - 0,0197%
  100. softball - 0,0197%
  101. alexis - 0,0195%
  102. yellow - 0,0194%
  103. alexandra - 0,0193%
  104. miguel - 0,0193%
  105. estrella - 0,0191%
  106. william - 0,0190%
  107. thomas - 0,0189%
  108. patrick - 0,0186%
  109. angela - 0,0186%
  110. beautiful - 0,0185%
  111. poohbear - 0,0184%
  112. mylove - 0,0183%
  113. adrian - 0,0181%
  114. alexander - 0,0181%
  115. iloveme - 0,0180%
  116. america - 0,0178%
  117. destiny - 0,0178%
  118. sakura - 0,0176%
  119. christian - 0,0176%
  120. princess1 - 0,0175%
  121. richard - 0,0174%
  122. monica - 0,0173%
  123. diamond - 0,0173%
  124. rangers - 0,0172%
  125. sayang - 0,0169%
  126. dancer - 0,0169%
  127. carolina - 0,0167%
  128. steven - 0,0167%
  129. 121212 - 0,0165%
  130. louise - 0,0164%
  131. shorty - 0,0163%
  132. nathan - 0,0163%
  133. gabriel - 0,0162%
  134. snoopy - 0,0161%
  135. 112233 - 0,0160%
  136. orange - 0,0160%
  137. alejandro - 0,0159%
  138. 555555 - 0,0159%
  139. hunter - 0,0159%
  140. SANDRA - 0,0158%
  141. brittany - 0,0158%
  142. cherry - 0,0157%
  143. alejandra - 0,0157%
  144. killer - 0,0156%
  145. buster - 0,0155%
  146. george - 0,0155%
  147. 789456 - 0,0155%
  148. 999999 - 0,0155%
  149. 11111 - 0,0153%
  150. patricia - 0,0153%
  151. rachel - 0,0153%
  152. antonio - 0,0151%
  153. arsenal - 0,0151%
  154. david - 0,0151%
  155. tequiero - 0,0149%
  156. heather - 0,0148%
  157. FERNANDO - 0,0147%
  158. STEPHANIE - 0,0147%
  159. victoria - 0,0146%
  160. dolphin - 0,0146%
  161. ginger - 0,0146%
  162. blink182 - 0,0146%
  163. manuel - 0,0146%
  164. CHEESE - 0,0145%
  165. peanut - 0,0144%
  166. beauty - 0,0144%
  167. corazon - 0,0144%
  168. angel1 - 0,0143%
  169. sweetie - 0,0143%
  170. honey - 0,0143%
  171. cristina - 0,0143%
  172. pokemon - 0,0143%
  173. ricardo - 0,0142%
  174. maggie - 0,0142%
  175. rainbow - 0,0141%
  176. chicken - 0,0141%
  177. rebelde - 0,0141%
  178. kisses - 0,0141%
  179. 7777777 - 0,0141%
  180. babygurl - 0,0141%
  181. 159753 - 0,0140%
  182. pepper - 0,0140%
  183. myspace - 0,0140%
  184. martin - 0,0138%
  185. november - 0,0138%
  186. heaven - 0,0138%
  187. greenday - 0,0138%
  188. 222222 - 0,0138%
  189. 987654 - 0,0137%
  190. 00000 - 0,0137%
  191. alyssa - 0,0135%
  192. baseball - 0,0135%
  193. madison - 0,0135%
  194. 123abc - 0,0134%
  195. mother - 0,0132%
  196. batman - 0,0132%
  197. morgan - 0,0131%
  198. maria - 0,0131%
  199. mariposa - 0,0131%
  200. december - 0,0131%
  201. gabriela - 0,0131%
  202. september - 0,0131%
  203. 55555 - 0,0131%
  204. JEREMY - 0,0130%
  205. bailey - 0,0130%
  206. iloveyou2 - 0,0130%
  207. shannon - 0,0129%
  208. mahalkita - 0,0129%
  209. kimberly - 0,0128%
  210. pamela - 0,0128%
  211. babygirl1 - 0,0128%
  212. jessie - 0,0127%
  213. gemini - 0,0127%
  214. 123321 - 0,0126%
  215. tiffany - 0,0126%
  216. pictures - 0,0126%
  217. claudia - 0,0126%
  218. angelica - 0,0125%
  219. victor - 0,0125%
  220. sophie - 0,0125%
  221. hellokitty - 0,0125%
  222. andres - 0,0125%
  223. inuyasha - 0,0124%
  224. asshole - 0,0124%
  225. austin - 0,0124%
  226. eduardo - 0,0124%
  227. mariana - 0,0124%
  228. courtney - 0,0123%
  229. chris - 0,0122%
  230. JESUS1 - 0,0122%
  231. booboo - 0,0121%
  232. ronaldo - 0,0121%
  233. harley - 0,0121%
  234. horses - 0,0121%
  235. iloveyou1 - 0,0120%
  236. veronica - 0,0120%
  237. precious - 0,0120%
  238. mahalko - 0,0120%
  239. october - 0,0119%
  240. adriana - 0,0119%
  241. peaches - 0,0119%
  242. kissme - 0,0118%
  243. james - 0,0118%
  244. cutie - 0,0117%
  245. diana - 0,0116%
  246. prince - 0,0116%
  247. celtic - 0,0116%
  248. crystal - 0,0116%
  249. edward - 0,0115%
  250. jackie - 0,0114%
  251. banana - 0,0114%
  252. christopher - 0,0114%
  253. sebastian - 0,0113%
  254. oliver - 0,0113%
  255. KARINA - 0,0113%
  256. friend - 0,0113%
  257. kenneth - 0,0113%
  258. johnny - 0,0113%
  259. rebecca - 0,0113%
  260. FREEDOM - 0,0113%
  261. samsung - 0,0113%
  262. scooby - 0,0113%
  263. angelo - 0,0113%
  264. master - 0,0112%
  265. CARMEN - 0,0112%
  266. zxcvbnm - 0,0112%
  267. 888888 - 0,0112%
  268. spiderman - 0,0111%
  269. hotmail - 0,0110%
  270. barcelona - 0,0110%
  271. orlando - 0,0110%
  272. bitch - 0,0110%
  273. cameron - 0,0109%
  274. samuel - 0,0109%
  275. brenda - 0,0109%
  276. slipknot - 0,0108%
  277. school - 0,0108%
  278. august - 0,0108%
  279. 50cent - 0,0107%
  280. kevin - 0,0107%
  281. monkey1 - 0,0107%
  282. bonita - 0,0107%
  283. 456789 - 0,0106%
  284. isabel - 0,0106%
  285. karen - 0,0106%
  286. babyboy - 0,0106%
  287. cutiepie - 0,0106%
  288. casper - 0,0106%
  289. javier - 0,0105%
  290. natalie - 0,0105%
  291. mustang - 0,0105%
  292. 0123456789 - 0,0104%
  293. bowwow - 0,0104%
  294. kitten - 0,0104%
  295. maganda - 0,0104%
  296. adidas - 0,0103%
  297. laura - 0,0103%
  298. sarah - 0,0102%
  299. denise - 0,0102%
  300. portugal - 0,0101%
  301. chrisbrown - 0,0101%
  302. nicholas - 0,0101%
  303. alicia - 0,0101%
  304. marvin - 0,0100%
  305. jasper - 0,0100%
  306. cuteako - 0,0100%
  307. cristian - 0,0100%
  308. bianca - 0,0099%
  309. rockstar - 0,0099%
  310. JANUARY - 0,0099%
  311. tigers - 0,0098%
  312. smokey - 0,0098%
  313. chester - 0,0098%
  314. flowers - 0,0097%
  315. fuckoff - 0,0097%
  316. love123 - 0,0097%
  317. 789456123 - 0,0097%
  318. strawberry - 0,0097%
  319. benfica - 0,0097%
  320. volleyball - 0,0097%
  321. silver - 0,0096%
  322. INTERNET - 0,0096%
  323. tintin - 0,0096%
  324. 123654 - 0,0096%
  325. dennis - 0,0096%
  326. garfield - 0,0096%
  327. sweet - 0,0096%
  328. jordan23 - 0,0096%
  329. cassie - 0,0096%
  330. 777777 - 0,0095%
  331. Francis - 0,0095%
  332. aaliyah - 0,0095%
  333. harrypotter - 0,0094%
  334. monique - 0,0094%
  335. camila - 0,0094%
  336. charles - 0,0094%
  337. panget - 0,0094%
  338. olivia - 0,0093%
  339. cancer - 0,0093%
  340. asdfgh - 0,0093%
  341. qwertyuiop - 0,0092%
  342. 101010 - 0,0092%
  343. Brianna - 0,0092%
  344. vincent - 0,0092%
  345. midnight - 0,0092%
  346. lollipop - 0,0092%
  347. lorena - 0,0092%
  348. superstar - 0,0092%
  349. mexico - 0,0092%
  350. christine - 0,0091%
  351. rafael - 0,0091%
  352. abigail - 0,0091%
  353. charmed - 0,0091%
  354. katherine - 0,0091%
  355. scorpio - 0,0091%
  356. nirvana - 0,0091%
  357. MERCEDES - 0,0091%
  358. ihateyou - 0,0090%
  359. 696969 - 0,0090%
  360. benjamin - 0,0090%
  361. gangsta - 0,0090%
  362. apples - 0,0090%
  363. michael1 - 0,0090%
  364. POOKIE - 0,0090%
  365. johncena - 0,0089%
  366. BROOKE - 0,0089%
  367. abcdef - 0,0089%
  368. sergio - 0,0089%
  369. travis - 0,0088%
  370. icecream - 0,0088%
  371. andreea - 0,0088%
  372. julian - 0,0088%
  373. METALLICA - 0,0088%
  374. fucker - 0,0087%
  375. hiphop - 0,0087%
  376. dakota - 0,0087%
  377. fernanda - 0,0087%
  378. sabrina - 0,0087%
  379. lovelove - 0,0087%
  380. stephen - 0,0086%
  381. aaaaaa - 0,0086%
  382. mybaby - 0,0086%
  383. myspace1 - 0,0086%
  384. jackson - 0,0086%
  385. jeffrey - 0,0086%
  386. love - 0,0086%
  387. roberto - 0,0085%
  388. welcome - 0,0085%
  389. catherine - 0,0085%
  390. babyblue - 0,0085%
  391. melanie - 0,0085%
  392. badboy - 0,0084%
  393. westlife - 0,0084%
  394. dolphins - 0,0084%
  395. sasuke - 0,0084%
  396. blondie - 0,0084%
  397. smiley - 0,0084%
  398. 131313 - 0,0084%
  399. fluffy - 0,0083%
  400. teresa - 0,0083%
  401. 333333 - 0,0083%
  402. jason - 0,0083%
  403. simple - 0,0083%
  404. raymond - 0,0083%
  405. ronald - 0,0082%
  406. anthony1 - 0,0082%
  407. newyork - 0,0082%
  408. santiago - 0,0082%
  409. steaua - 0,0082%
  410. minnie - 0,0082%
  411. gatita - 0,0081%
  412. marcus - 0,0081%
  413. JEROME - 0,0081%
  414. chivas - 0,0081%
  415. nicole1 - 0,0081%
  416. PIGLET - 0,0081%
  417. asdfghjkl - 0,0081%
  418. valeria - 0,0080%
  419. alberto - 0,0080%
  420. bitch1 - 0,0080%
  421. slideshow - 0,0080%
  422. chris1 - 0,0080%
  423. jayson - 0,0080%
  424. leslie - 0,0080%
  425. muffin - 0,0080%
  426. leonardo - 0,0080%
  427. christ - 0,0079%
  428. liliana - 0,0079%
  429. kitty - 0,0079%
  430. BROOKLYN - 0,0079%
  431. jayjay - 0,0079%
  432. jenny - 0,0079%
  433. lover - 0,0079%
  434. amores - 0,0078%
  435. ladybug - 0,0078%
  436. sweetheart - 0,0078%
  437. gandako - 0,0078%
  438. sexygirl - 0,0078%
  439. cookies - 0,0078%
  440. dexter - 0,0078%
  441. popcorn - 0,0078%
  442. natasha - 0,0078%
  443. miamor - 0,0077%
  444. babyko - 0,0077%
  445. fatima - 0,0077%
  446. babydoll - 0,0077%
  447. rockon - 0,0077%
  448. 88888888 - 0,0076%
  449. 5201314 - 0,0076%
  450. colombia - 0,0076%
  451. eeyore - 0,0076%
  452. 246810 - 0,0076%
  453. 123456a - 0,0076%
  454. christina - 0,0076%
  455. single - 0,0075%
  456. tatiana - 0,0075%
  457. happy - 0,0075%
  458. scooter - 0,0075%
  459. skittles - 0,0075%
  460. britney - 0,0075%
  461. lakers - 0,0075%
  462. albert - 0,0075%
  463. teddybear - 0,0075%
  464. manutd - 0,0075%
  465. 12345678910 - 0,0075%
  466. linda - 0,0074%
  467. london - 0,0074%
  468. lalala - 0,0074%
  469. winnie - 0,0074%
  470. katrina - 0,0074%
  471. francisco - 0,0074%
  472. natalia - 0,0074%
  473. 232323 - 0,0074%
  474. charlotte - 0,0073%
  475. marie - 0,0073%
  476. angelito - 0,0073%
  477. mahal - 0,0073%
  478. grace - 0,0073%
  479. amorcito - 0,0073%
  480. cocacola - 0,0073%
  481. paola - 0,0073%
  482. xavier - 0,0073%
  483. pasaway - 0,0072%
  484. 252525 - 0,0072%
  485. mommy1 - 0,0072%
  486. cantik - 0,0072%
  487. manchester - 0,0072%
  488. 159357 - 0,0071%
  489. genesis - 0,0071%
  490. kelsey - 0,0071%
  491. amigos - 0,0071%
  492. shelby - 0,0071%
  493. brandy - 0,0071%
  494. smile - 0,0071%
  495. garcia - 0,0070%
  496. teiubesc - 0,0070%
  497. linkinpark - 0,0070%
  498. marina - 0,0070%
  499. diego - 0,0070%
  500. fuckyou1 - 0,0070%

More interesting comparative analysis of all available password scopes will be published in the beginning of the next year within the bounds of "Analysis of password protection issues" (and not only in Russian companies).

6 comments:

  1. in my opinion this is very interesting and shows us that people ignore or doesn't care about risks of weak password. I think that everyone should be educated to become a safe web user.

    ReplyDelete
  2. Do Want! Is there any way you could post an alternative link to the raw data? I think I could have an insane amount of fun with this list. Anyway you could send it to me or repost it to Rapidshare?

    ReplyDelete
  3. The raw data have been received from torrent (reference)

    ReplyDelete
  4. Hi

    I like this post:

    You create good material for community.

    Please keep posting.

    Let me introduce other material that may be good for net community.

    Source: Financial consultant job description

    Best rgs
    Peter

    ReplyDelete
  5. Welcomes to google terminal from Austin Texas! google snake
    Amazing insight you have on this, Happy wheels it's nice to find a website that details so much information about different artists... Age of war 2 This article always blew me... Earn to die For how many times I have read this.
    slither io Hi! I’ve been reading your blog for a while slitherio it's nice to find a website that details so much big farm

    ReplyDelete