A database containing usernames and passwords for almost five million Google accounts emerged on a Russian forum late on September 9. The user dumpin...
The user dumping the information on Bitcoin Security board uses the online alias “tvskit” and says that although not all the entries are valid, more than 60% of them should be working; all passwords are provided in plain text.
It is unclear how the information was collected, but the most plausible theory is that the attacker(s) gathered the details through phishing and different forms of data exfiltration, such as the use of infostealing malware.
Via Gust MEES