The dump posted on April 27th by katographr to PasteBin appears to include user email addresses, SHA-1 160-bit hashes, and base64 encoded salts. The text below shows the beginning of the paste and the first three entries for the more than 4,000 accounts. I did a few searches on the hashes above just to see if they were pulled from another dump and didn’t come across any. Anyone try to crack any of these yet?
livingsocial.com 4K accounts selected randomly from a sample of over 50M accountsfull dump: http://pastebin.com/gkB6LQZD(email address) 1e7e7de494006873ef1b5f726f0c352e18c78e06 gksCIAlum9Vu2Svzdq27SEiQQ3KdSq1BCpt_Z_1qNSoC9qxaMMNAUg==(email address) f564bd31af7fe734973f9c3151bf0163bcdce405 mG20er4YPk4tEO3iDCZRc7o9UJNlHJECOfTUEgRcjS7jUCLMPb1h7g==(email address) a7f99404ccadb31ad76d28528eb5fb64805c3645 KKNFe1ck2UWzw6NjhzsGCEaBwLhVxNBXpkSXheoBKM2QW5oamCw-6A==
Following the link to “full dump” above asks for 1 BTC for the entire dump of 50K accounts.
livingsocial.com db dump with over 50M email/hashed password/ salt; get a private copy by sending 1BTC to 17seaSU3C37o6z8TRG2yjE4VgVCUoQ4fPa and email [email protected] with your sending addressrandom sample of 4K records: http://pastebin.com/xhPHeF0B
Do you think this is the real thing? Let us know in the comments below. Today’s post pic is from PCAuthority.com.au. See ya!