Hackers leave stolen passwords searchable on Google – ACS

Bad actors in a recent phishing campaign have left stolen credentials sitting on websites that were subsequently indexed and made searchable by Google.
The campaign, documented by cybersecurity firm Check Point in a blog post this month, saw hackers imitate email notifications for a Xerox photocopier.
Attached to the phishing emails was an HTML document which, when clicked, would send the user to a website with a pop-up that looked like the Microsoft authenticator on top of a blurred image of the…

Click here to view the original article.