Risk: Informational
As a result of a recent MySpace phishing attack, users' passwords were revealed to be relatively strong, with 45% including at least one number. The attack, orchestrated by a MySpace user, led victims to a fake log-in page and collected users' login information that was subsequently forwarded to compromised web servers.
Although the attack was shut down fairly quickly, 100,000 MySpace users fell victim to the phishers. 1.3% of password contained only numbers, 9.6% contained only letters, 81% were alphanumeric and 8.3% were non-alphanumeric.
The top 20 most popular passwords were: password1, abc123, myspace1, password, blink182, qwerty1, f***you, 123abc, baseball1, football1, 123456, soccer, monkey1, liverpool1, princess1, jordan23, slipknot1, superman1, iloveyou1 and monkey.