Bkav
cleartext passwords

On February 3, 2012, Bkav, Vietnam's top internet security firm was hacked and its forum database leaked to the public. The hacker behind the hack was reportedly arrested in less than a week later and identified by local police as a computer security employee of an IT company in Hanoi. The leak, initially announced and made available by the hacker at the forum site itself was quickly removed but not before it was also made available for download at several file sharing sites. The file released as dump.sql (565MB), contains the full database dump from the vBulletin-based forum site at http://forum.bkav.com.vn together with over 130,000 user accounts containing emails and passwords hashed with salted MD5.

What should you do?
Use the search box below to find out if your email is in the list. If yes, you are advised to change your password immediately if it is still in use elsewhere. For your privacy, do not enter your complete email in the search box. Try using the first part of your email instead, e.g. example instead of example@example.com.

If you wish to have your entry removed from the list below, please send your request to disclosure@dazzlepod.com with subject "bkav removal request". The removal is usually done automatically within 48 hours if you use the same email as the one appeared in the list.

Comments/Questions? Send to disclosure@dazzlepod.com

Tweet