Facebook rejects 10,000 accounts hacked
Facebook says Team Swastika's supposed hack of account logins was no hack at all.
Facebook has rebuffed reports that more than 10,000 account logins were stolen by a new hacktivist group.
A post from a group calling themselves Team Swastika appeared on Pastebin briefly, claiming to contain thousands of pilfered Facebook usernames and passwords.
The Pastebin post has now been removed, but Trend Micro's director for security research Rik Ferguson managed to spot and store the details today.
However, Facebook looked into the issue and said the details did not relate to any active accounts.
"This does not represent a hack of Facebook or anyone's Facebook profiles," a Facebook spokesperson said.
"Our security experts have reviewed this data and found it to be a set of e-mail and password combinations that are not associated with any live Facebook accounts."
Facebook said Trend Micro's use of the term "hacked" was "simply wrong." Ferguson never indicated Facebook itself had been hacked, however, and the social network said the data had been taken in a phishing attack.
Little is known about Team Swastika, which has also published details from the websites of the Indian Embassy in Nepal and the Government of Bhutan.
The group announced its arrival on the hacking scene just a week ago, with one tweet indicating it would be part of the growing hacktivism scene.
"Fight For Justice | Justice To Freedom Never Give up | Never Back down," the Twitter message read.
IT Pro spoke to Ferguson before Facebook's comments, saying Team Swastika would not want to lose any credibility at such an early stage of its development, which it could do by making false claims.
"Certainly it would go against their credibility because somebody out there will test it," Ferguson said. "Credibility is going to be very important to them."
Ferguson has attempted to contact Team Swastika about the alleged hack.
They seem to be Nepalese hackers targeting the Indian embassy in Nepal and the Government of Bhutan.
The who?
As for the hacking group's provenance, the only leads come from its name and previous targets.
"Don't forget the swastika is an Indian symbol originally, it wasn't a Nazi thing originally," Ferguson added.
"They seem to be Nepalese hackers targeting the Indian embassy in Nepal and the Government of Bhutan."
Previous Team Swastika compromises appeared to have been carried out with a SQL attack.
-
AI forces bigger software players to adapt pricing to competeIndustry Insights Software companies adding AI capabilities will need to upgrade monetization stacks designed for subscriptions rather than usage-based billing
-
Why AI adoption may be lagging in Global South businessesIn-depth Brain drain and training languages continue to be major barriers for localized AI adoption
-
The NCSC says it’s time to switch to passkeysNews UK security organization calls for companies to step up and offer more secure ways to login
-
AI agents are creating new identity security risks: 1Password wants to solve thatNews The Unified Access system from 1Password will help enterprises manage AI agent access across different devices and users
-
Using AI to generate passwords is a terrible idea, experts warnNews Researchers have warned the use of AI-generated passwords puts users and businesses at risk
-
Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company respondedNews Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking
-
Thousands of exposed civil servant passwords are up for grabs onlineNews While the password security failures are concerning, they pale in comparison to other nations
-
Gen Z has a cyber hygiene problemNews A new survey shows Gen Z is far less concerned about cybersecurity than older generations
-
Passwords are a problem: why device-bound passkeys can be the future of secure authenticationIndustry insights AI-driven cyberthreats demand a passwordless future…
-
LastPass just launched a tool to help security teams keep tabs on shadow IT risksNews Companies need to know what apps their employees are using, so LastPass made a browser extension to help
