Hundreds of Dropbox user login credentials were posted on Pastebin yesterday by a user who claimed to have 7 million more username-password combinations at the ready. The credential trader said they would release more logins if they received enough Bitcoin donations. Dropbox confirmed that some of the stolen logins did indeed match those for Dropbox accounts, but also said that the company itself was not breached. Security experts say the real problem is single-factor authentication, which is needed to prevent password-based attacks, says Jason Hart.”]
Source: https://www.darkreading.com/attacks-breaches/hundreds-of-dropbox-logins-for-sale-on-pastebin

