Hundreds of Skype accounts hacked for spam

2016 Unknown records affected

Data compromised

Passwords

Technical writeup

Compromised Skype accounts sent spam; two-factor bypass possible via legacy Skype password. Microsoft released guidance to merge Microsoft/Skype accounts.

Root cause

Credential reuse; 2FA bypass via stored Skype password.

References

https://msrc.microsoft.com/