2017 Onliner Spambot — 711M email credentials
Data compromised
Email addresses, passwords, SMTP server information
Technical writeup
Benkow discovered unsecured server in Netherlands with 711M email-password pairs. Used to distribute Ursnif banking trojan.
Root cause
Malware campaign - aggregated stolen credentials