The police has found on a server of a company more than 18 million login credentials, roughly 1.78 million belong to customers of Yahoo Japan (90 percent), Twitter, Facebook, e-commerce company Rakuten and other websites. Nicchu Shinsei Corp allegedly offered its services to Chinese hackers, it provided stolen credentials and proxy services. The hackers used the login credentials to invite users in visit fraud websites, and steal reward points earned by victims. The investigators have also discovered on the server a hacking tool used to brute force the target accounts.”]
Source: https://securityaffairs.co/wordpress/45636/cyber-crime/japan-18m-stolen-credentials.html