On a related note, there are tons of popups that claim your system is infected. 'Click Here' to clean your system bla bla bla, all bullshit and the popups can be frustrating at times and difficult to terminate. Always checking the process behind the popup can give you an idea if its the browser or something running from your hard drives.
If you are, since you're on this forum, I'd probably trust that. So that email checking site is legit? Does anybodies email NOT come up infected on it? Anyone?
Got a few of those and yeah they had real pws from crap sites - I can tell because they were the throwaway pws I use on those sites. I ignored them and nothing has happened nor can it happen as all they could do is get to bs sites where I have no real info or cc's stored or the like.
Considering there have been billions and billions of emails and other PII that have been found in breached data, including 3 billion Yahoo addresses, the chances of someone not being affected are smaller than someone that has been affected. Here's a listing of breached websites and lists: https://haveibeenpwned.com/PwnedWebsites Here's a listing of the largest breaches ever: https://qz.com/1480809/the-biggest-data-breaches-of-all-time-ranked/ The "ihavebeenpwned" website just informs you if you have anything on that list. There's no great conspiracy and all the information discovered by Troy Hunt (ihavebeenpwned owner) is publicly available data that he cross checks against.
I would assume because no SSL server cert has been installed. Those things are more than a little PITA to get the first time, too. And they aren't cheap, either.
More fuel for the fire... https://www.theguardian.com/technol...t-collection-ever-seen-email-password-hacking
and yet, right now, I'm wandering around your house, wearing only a jockstrap, putting ass prints on all your stuff and getting ready to make a ham sandwich.
Yet another huge credential dump has been found. The fact that this site doesn’t use tls means any password/user name combo is susceptible to clear text sniffing (readable over the wire). I hope your login to non-tls sites is unique. https://www.welivesecurity.com/2019...Feed:+eset/blog+(ESET+Blog:+We+Live+Security)