After that, a great deal of spam poured into Dropbox users\u2019 mailboxes, including phishing messages and other malware. Following the incident, Dropbox introduced a two-factor authorization, although for users this option was to be activated separately<\/a>.<\/p>\n Blizzard had already implemented two-factor protection (with the use of mobile devices) for a long time. It basically forbade stealing people\u2019s game accounts. However, there was an intrusion into the internal infrastructure of the company<\/a>. The attackers managed to get ahold of a number of email addresses of Battle.net users around the world. In addition, hackers accessed the answers to security questions, authorization via mobile devices, and hashed passwords. Blizzard\u2019s statement, however, said that the attackers would have a difficult time trying to decode the passwords, because of Secure Remote Password (SRP) protocol being used.<\/p>\n The users were advised to change their passwords anyway.<\/p>\n Twitter (February 2013)<\/b><\/p>\n In February 2013 attackers invaded the Twitter base and stole logins and email addresses together with hashed and salted passwords for 250,000 users.<\/p>\n According to the Twitter administration, the user database was cracked by professionals. Moreover, Twitter\u2019s head of safety and security, Bob Lord, quite eloquently alluded<\/a> that the attack was performed by the same professionals who had previously hacked The New York Times and The Wall Street Journal (was it Winnti<\/a>?).<\/p>\n Lord also mysteriously mentioned the recommendations by the U.S. Department of Homeland Security to disable Java in the browsers because of a well-known vulnerability CVE-2013-0422<\/a>, for which a zero-day exploit was discovered. Lord did not elaborate much on its connection with the Twitter attack.<\/p>\n Evernote (March 2013)<\/b><\/p>\n In March, the popular service Evernote urged all of its 50 million users to change passwords. The necessity arose after an unauthorized entry into the internal infrastructure of the company occured. The attackers managed to gain access to logins, relevant mail addresses and hashed passwords that Evernote fortunately stored in a salted form. The criminals did not make it to the users\u2019 content. However, Evernote was criticized for the lack of two-factor authentication. There were also many harsh words said about the Evernote invasion as a bad attempt for publicity of cloud services in general, for the situation itself favored SaaS opponents.<\/p>\n
![\"evernote\"](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2013\/07\/06015803\/evernote.png\")
<\/a><\/p>\n