This table shows the number of banking institution credentials researchers gathered in a 10-day span. UC Santa Barbara
This table shows the top ten sites for which researchers obtained log-ins. UC Santa Barbara
By Eyder Peralta
Alright, we won't make talking about the underbelly of technology a habit, but I have to bring this up:
Researchers at the University of California Santa Barbara were able to hack the Torpig botnet and analyze the kind of information this malware steals. A malware, just so we're clear, is software that wiggles into your computer without your knowledge or consent and usually sends back information through a botnet.
That's what the researchers were looking at. In 10 days, they found 70 gigs worth of information, encompassing 297,962 unique log-ins sent by 52,540 machines.
Most of them were passwords for seemingly innocuous social networking sites like myspace.com and facebook.com. But here's the important part: The researchers found that "28 percent of victims reused their credentials for accessing 368,501 sites."
So even if they didn't steal your bank info, it would likely take very little time for someone to figure it out.
That lead to the conclusion that:
"... The malware problem is fundamentally a cultural problem. Even though people are educated and understand well concepts such as the physical security and the necessary maintenance of a car, they do not understand the consequences of irresponsible behavior when using a computer. Therefore, in addition to novel tools and techniques to combat botnets and other forms of malware, it is necessary to better educate the Internet citizens so that the number of potential victims is reduced."
So, yes, I'm going to go change my bank account password, now. I'll add a few numbers I won't be able to remember later. Sigh.
Further Reading On Botnets:
BBC Buys A Botnet
Botnets Hit Mac Computers