Security researcher claims to have downloaded sensitive data from 13 million accounts of MacKeeper scamware app

“As if conning people out of money for a piece of scamware that does nothing useful weren’t bad enough, a security researcher claims that extremely poor security has allowed him to access sensitive data for more than 13M MacKeeper accounts,” Ben Lovejoy reports for 9to5Mac.

I have recently downloaded over 13 million sensitive account details related to MacKeeper, Zeobit, and/or Kromtech […] stuff like names, email addresses, usernames, password hashes, computer name, ip address, software license and activation codes, type of hardware (ex: “macbook pro”), type of subscriptions, phone numbers and computer serial numbers.

Lovejoy reports, “The data was accessed by white-hat researcher Chris Vickery, who previously exposed data breaches at MLB, ATP, Slipknot and a network of charter K-12 schools in California.”

Read more in the full article here.

MacDailyNews Take: Do not install MacKeeper. Certainly do not buy MacKeeper. If you have MacKeeper, uninstall it now.

SEE ALSO:
MacKeeper buyers ask for refunds in droves following class-action lawsuit – October 23, 2015
MacKeeper customers can file a claim to get their money back – August 10, 2015
Don’t waste your money on OS X snake oil for your Mac – July 28, 2015
How to detect and remove MacKeeper and keylogger malware on your Mac – July 17, 2015
Controversial MacKeeper security program opens critical hole on Mac computers – May 12, 2015
What ‘MacKeeper’ is and why you should avoid it – January 21, 2015
How to uninstall MacKeeper from your Mac – December 19, 2014

3 Comments

  1. i believe, after reading this over a couple of times, that it is not 13 million accounts, but 13 million details (individual items of data) from some unknown number of accounts. big difference.

  2. What a sad statement:
    13 million suckers running MacKeeper.

    I did my part waking people up to the MacKeeper scam.
    But it wasn’t enough.
    IT WASN’T ENOUGH!

    elTritoma: i believe, after reading this over a couple of times, that it is not 13 million accounts, but 13 million details (individual items of data) from some unknown number of accounts.

    Never mind! 😉

    1. More on this inevitable mess:

      MacKeeper hacked: 13 million account details exposed
      After leaving sensitive data open on the Internet, Kromtech says the vulnerability has been fixed.

      This isn’t the first time MacKeeper has been in the news for a security issue. In May, a hole in the software could let attackers execute malicious commands on Macs when their owners visit specially crafted Web pages. That vulnerability was fixed with a software update.

      Just say ‘NO!’

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.