Doubts have been cast on the motives of a security company that claims to have recovered a haul of 1.2 billion stolen passwords from the Russian criminal gang CyberVor. US company Hold Security said that the haul represented the "largest data breach known to date". But in an unusual move, the company is charging websites $120 a year to find out if they were hacked, leading some to suspect that the company is trying to cash in on an exaggerated security scare Chester Wisniewski of security company Sophos said that he doesn't know if Hold's claim is "a big deal" because not enough information has been made public.
展开▼
