Email passwords are among 183,000,000 leaked web account details which have been openly shared among cyber criminals for months or more, experts have found.

The massive trove of data was originally leaked from computers infected with a type of malware called infostealers, which log the email address and password used when a user logs into a website.

Chunks of this data – known as ‘stealer logs’ – were leaked online, ending up on easily-accessible platforms such as Telegram, social media sites and web forums.

Stealer logs are shared by a huge and complex ecosystem of hackers who are not working together and often copy older logs, meaning significant new breaches are very difficult to expose.

A US college student working with cybersecurity firm Synthient created a system to trawl vast am

See Full Page