steffanA
Joined 5 years ago
Joined 5 years ago
The breach happened over a week before the DDoS attack, according to Troy Hunt.
Stop looking for conspiracy theories.
Theoretically, someone could scrape the pages and compile a list of exposed email addresses.
When not used for extortion and for "status" in the hacking community, they share them with researchers (commonly HIBP) to warn people about a site's security and so that site is forced to fix things.
Definitely a strange dynamic.
https://www.bleepingcomputer.com/news/security/internet-arch...
Many malware hijack search settings. However, very few hijack default browsers themselves these days. In the past (10 years ago) it was much more common.
Furthermore, I don't know of many malware that touch the .PDF file extension associations, and there are plenty of other associations that would be better to hijack.
Feels more like a sloppy fix to comply with EU's DMA.
https://www.theverge.com/2021/9/13/22671182/mozilla-default-...
In reality, it's your choice to stay on an end-of-support OS and purchase updates if you wish to remain secure.
These are for end of life products and it is very common for companies to require additional support contracts to keep supporting them.
You do not have to continue using said version of Windows, upgrades are now essentially free, and as long as you are on a supported version of Windows, you will continue to get free security updates.
Microsoft is not charging anyone for security updates unless you wish to use the operating system after end of life.