Habbo, a social networking service once known as Habbo Hotel, has been hit by a phishing attack.
The development comes not long after Habbo Hotel, owned by Sulake Corporation, was raided by cyber criminals for virtual items, such as furniture.
This week Imperva researchers discovered a hacker bragging about having acquired user credentials and personal details from the social networking site, which is aimed at teenagers.
Details held by the hacker, who claimed to be an 18-year-old from Eindhoven in the Netherlands, included user passwords and parents' addresses, as many of Habbo's users are minors.
The cyber criminal had been posting about her phishing success on T35.com, a free hosting provider that security specialist Imperva said was popular among hackers.
"In this particular instance the extent of the damage is something that only the hacker would be able to identify," Rob Rachwald, director of security strategy Imperva, told IT PRO
One person who gained access to the login details discovered that they were the same for one user's parent's ebay account. In this case the hacker decided not to use the discovery for their own gain as they claimed not to want to do anything so evidently illegal.
"With the IDs you can do lots of different things and this is where things get a little bit dark because you don't know what was done with those IDs," Rachwald said.
He noted that by targeting teenagers through Habbo, hackers had an easier target and there was still monetary value at the end of it.
"This is probably the beginning of a trend as social networking becomes much more prevalent and as social networking becomes monetised," Rachwald added.
"The biggest user of social networking tends to be younger people and they tend to be the most gullible as well. I think we're looking at something that over the next couple of years will unfortunately occur more frequently."
He recommended parents educate their offspring about the dangers that can appear online.
At the time of publication, Sulake had not responded to IT PRO's request for comment on the hack.
-
Should AI PCs be part of your next hardware refresh?AI PCs are fast becoming a business staple and a surefire way to future-proof your business
-
Westcon-Comstor and Vectra AI launch brace of new channel initiativesNews Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
-
What is your digital footprint?In-depth Your digital footprint is always growing – so we explore how you can keep it under control
-
Nine top GDPR tips for email marketing strategiesIn-depth It's not all doom and gloom – here's how you can make GDPR work for you
-
Why GDPR creates a "vicious circle" for marketersNews Customers will control the forthcoming trust economy, predicts Aprimo
-
Facebook will allow adverts to target users based on beliefsNews The company will also give users opt-ins to use facial recognition to prevent impersonation
-
Tim Berners-Lee: How we can win back the webNews The public must reject misinformation and keep control of their own data
-
Social network users play fast and loose with data privacyNews Over-sharing puts users at risk of identity theft and fraud
-
UK government Facebook data requests grow 71%News Only US and India ask for more user details from the social network
-
Virginia shooting - don't open that link!Opinion Scammers and cyber criminals love to capitalise on tragedy, and we can't help but click
