Hacker Lifts Millions of User Credentials from Webmail Providers: Report

Hacker Lifts Millions of User Credentials from Webmail Providers: Report

A hacker recently attempted to sell hundreds of millions of stolen records to Hold Security for less than one US dollar, the information security firm said on Wednesday.

The “kid from a small town in Russia” has collected 272 million unique stolen credentials, according to Hold Security, and even more disturbing, the company has never seen 42.5 million of them before, meaning they may be from previously unreported breaches.

While most of the data Hold Security initially recovered from the hacker was unattributed data which had been passed around the Dark Web, some was originally stolen from a major Eastern European communications company, and medium-sized online service providers.

SEE ALSO: Organizations Feel More Confident in their Security Than a Year Ago: Report

When the full data set was recovered, Hold found millions of credentials from Mail.ru, Google, Yahoo, and Microsoft email accounts. All four companies told the BBC they were aware of the stolen credentials, and Mail.ru said that its investigation has initially suggested that the credentials may not still be active.

Email address and password combinations that have gone stale can still be useful to cybercriminals, however, for instance in targeted phishing attacks.

“This information is potent. It is floating around in the underground and this person has shown he’s willing to give the data away to people who are nice to him,” Hold Security founder and chief information security officer Alex Holden told Reuters. “These credentials can be abused multiple times.”

Hold Security has an established track record of uncovering breaches, including the theft of 1.2 billion credentials by the “Cybervor” gang in 2014.

Hold Security came into contact with the hacker as part of its regular interaction with the cybercriminal underworld, which supplements its automated information harvesting. The hacker claimed to have 900 million credentials in one batch, and after a protracted period of negotiation and refusing to pay the 50-rouble asking price, Hold managed to exchange “likes/votes to his social media page” in return for a compressed database containing a total of 1.17 billion stolen credentials from various breaches.

Source: TheWHIR

After Gorging for Years, Endurance International Group Appetite for Hosting Acquisitions Slows

After Gorging for Years, Endurance International Group Appetite for Hosting Acquisitions Slows

In its Q1 2016 earnings call on Tuesday, Endurance International Group (NYSE: EIGI) CEO and founder Hari Ravichandran said that the company, which is known for its rapid pace of acquisitions, will slow down its M&A activity and other investments as it focuses on the integration of Constant Contact, the email marketing platform it acquired for $1.1 billion last year and closed in February.

The acquisitions it does will be “less focused on the hosting space and more focused on product and technology space,” he said.

Endurance International Group reported a net income of $21.8 million or $0.16 a share for Q1 2016 on Tuesday, but fell short of analysts expectations, precipitating a significant sell-off of the Nasdaq-listed company’s shares. EIG’s share price had fallen over 46 percent from $20.01 a year ago to $10.72 at the close of trading on Tuesday.

In Wednesday trading, EIG shares have fallen below $9, despite a refrain of optimism from both the company and analysts. The Associated Press reports that an average estimate of EIG’s earnings per share (EPS) from five analysts surveyed by Zack’s Investment Research was $0.26, and Risers & Fallers showed that five major investment firms weighing in since the start of the year had all reiterated prior neutral or positive ratings. Most recently among them, Credit Suisse maintained its “outperform” rating, and set its target price at $18.

SEE ALSO: Endurance International Group Appoints SVP of M&A Integration

“This quarter demonstrated a collective focus as we balanced our efforts between the initial integration of Constant Contact and the other initiatives we are simultaneously driving,” EIG CEO and founder Hari Ravichandran said in an earnings call.

Ravichandran maintained that EIG’s cloud and WordPress products “are doing record numbers.”

“In 2016, we will be investing in marketing to drive our growth products and initiatives,” he said. “Our framework for the incremental spend considers some essential elements. First, as products are initially launched, subscriber acquisition costs are higher than they are at scale. Second, we’re entering into products with subscriber profiles that are different than our traditional hosting subscribers.”

The stock price had declined slightly through the first quarter prior to the earnings announcement. With a 34 percent increase in GAAP revenues over Q1 2015, and nearly 5.5 million total subscribers, EIG is undeniably still experiencing growth. Further, adjusting for one-time gains and costs, including a large tax benefit, EIG’s earnings were $0.24 per share. Earnings were roughly in line with analyst expectations.

EIG acquired SMB marketing platform Constant Contact in November in a deal WHIR blogger Tom Millitzer called “a turning point” for the the company, suggesting the parent should adopt Constant Contact as its top-level brand name to draw together its portfolio of dozens of hosting and web services brands.

Source: TheWHIR

Organizations Feel More Confident in their Security Than a Year Ago: Report

Organizations Feel More Confident in their Security Than a Year Ago: Report

Half of IT professionals say their organizations are less vulnerable now than a year ago, compared to only 12 percent who say they are more vulnerable, according to a report released Tuesday by IT management provider SolarWinds.

Penton Research surveyed 221 IT professionals between December 2015 and March 2016 from various sized-companies in North America for SolarWinds.

While 55 percent of those surveyed did not experience a breach in 2015, only 29 percent said they did, leaving nearly one in six who (troublingly) seem to not know. Thirty percent of organizations experienced less IT security incidents in 2015, while only 20 percent experienced more. This could represent a stunning decline in attacks, but more likely reflects attacks becoming more specifically targeted and repeated, in line with other recent research. Indeed, increasing sophistication was cited as the top reason for increased vulnerability.

TRENDING: Cloud Companies “Might Feel Good About Themselves” But Good Luck Reaching AWS Heights: Report

There is more encouraging news, however, as 36 percent said their response time decreased, versus 28 percent saying it had increased. SQL injection attacks, known vulnerabilities, rogue network devices, and security policy violations each take “mere minutes” for roughly half of those surveyed to detect.

“The most surprising finding of the survey is just how many organizations are less vulnerable today than they were a year ago, and, on a related note, how many have implemented security technologies and better security training,” Mav Turner, director, business strategy, SolarWinds said in a statement.

However, Turner warns, IT professionals need to avoid overestimating their defenses, as the stakes have risen, with 72 percent of breaches occurring at organizations who store customer data, and 45 percent store social security numbers. Over half considered the breaches to be medium or major severity.

“Given the heightened international media attention on IT security breaches, it was a pleasant surprise to see that 55 percent of respondents did not experience any security breaches in 2015, and only 24 percent believe a security breach is likely in 2016,” said Dr. Kristin Letourneau, director of research at Penton. “The survey data seems to reflect a shifting focus from fear of cyberattack, to the implementation, maintenance and refinement of established and effective security systems.”

When asked about best security practices, 83 percent identified endpoint security software as critical or very important, followed by patch management software (75 percent) and access management tools (71 percent). The top reasons for decreased vulnerability are adoption of intrusion detection and prevention systems, increased data encryption, patch management, security information and event management (SIEM) tools, and personnel security training.

Disclosure: Penton is the WHIR’s parent company.

Source: TheWHIR

Cloud Management Firm CloudHealth Technologies Raises $20 Million

Cloud Management Firm CloudHealth Technologies Raises Million

Cloud management software provider CloudHealth Technologies announced Tuesday it has raised $20 million to increase support for all enterprise cloud environments in a series C funding round led by Sapphire Ventures. Sapphire joins existing investors Scale Venture Partners, .406 Ventures, and Sigma Prime Ventures, and managing director Jai Das will join the CloudHealth board of directors.

Between the three funding rounds CloudHealth has now raised $40 million in total. The first was in 2013, and Ariel Tseitlin of ScaleVP joined CloudHealth’s board in the $12 million B round just over a year ago. CloudHealth said it will spend its current funding round on sales, marketing, engineering, support, and “customer success.”

“Sapphire Ventures has a proven track record of creating global category leaders, which is why we are proud they are leading this round,” said CloudHealth Technologies CEO and co-founder Dan Phillips. “Sapphire engaged with us immediately after we closed our B round and spent the following year learning about our business and culture. During that time, the Sapphire team provided tremendous value to us and aligned very well with our culture. It was an ideal process with a VC in terms of the value and commitment they demonstrated.”

CloudHealth’s cloud analytics platform enables clients to visualize, optimize, and automate of cloud environments, and the company said its clients have used its insights to formulate policies to significantly reduce cloud costs. Big name CloudHealth clients include Dow Jones and Acquia.

“We are very impressed with CloudHealth’s leadership, strategy and ability to execute in this rapidly evolving market,” said Das. “As the cloud plays an increasingly integral role in enterprise business, companies that can wring the most value out of their cloud resources are going to come out on top. CloudHealth helps its customers do just that, and we look forward to applying our enterprise experience and network to help the company drive growth.”

Source: TheWHIR

Cloud Companies "Might Feel Good About Themselves" But Good Luck Reaching AWS Heights: Report

Cloud Companies "Might Feel Good About Themselves" But Good Luck Reaching AWS Heights: Report

After the “big four” public cloud providers, the next 20 companies are growing at an average of 41 percent per year – and still losing market share. The overall cloud infrastructure services market (including IaaS, PaaS, private and hybrid) is growing by 50 percent a year, according to the latest quarterly report from Synergy Research Group. Synergy estimates that overall quarterly revenues have “comfortably passed” $7 billion.

Amazon Web Services (AWS), which just named a new CEO, maintains a dominant position with 31 percent of the global market share for cloud infrastructure services, with 57 percent year-over-year growth. Microsoft, IBM, and Google account for a combined 22 percent, and while IBM had what would normally be considered strong quarterly growth, Microsoft and Google’s infrastructure services revenue grew by over 100 percent on an annualized basis. The next 20 companies (which include Alibaba, Rackspace, HPE and others) make up 27 percent of the total market for cloud infrastructure.

Read more: AWS Celebrates 10 Years in the Cloud

“This is a market that is so big and is growing so rapidly that companies can be growing by 10-30 percent per year and might feel good about themselves and yet they’d still be losing market share,” said John Dinsdale, a Chief Analyst and Research Director at Synergy Research Group. “The big question for them is whether or not they are building a sustainable and profitable business. This can be done by focusing on specific regions or specific services, but the bulk of the market demands huge scale, a broad footprint, very deep pockets and a long-term corporate focus.”

The “next 20” includes Alibaba, Century Link, Fujitsu, Orange, Rackspace, HPE, NTT, Salesforce, and VMware. Other companies with smaller shares than the biggest 24 companies still account for nearly 20 percent of the world market, with 30 percent growth.

Synergy found growth rates to be similar across regions, so the US continues to represent roughly half of the world market.

Research published last year by Synergy showed that infrastructure services are just one part of a much larger cloud revenue picture, which also includes the cloud infrastructure hardware market, which is led by Cisco and HP.

Read more: Microsoft Azure Offers Support Upgrades for Select Enterprise Cloud Users

Source: TheWHIR