Hack Check Hacked

  1. Avast Hack Check accessed from https://account.avast.com claims two passwords are compromised.
  2. The email sent from notification@emails.avast.com about them only indicates one - an old www.myspace.com password in encrypted format.
  3. On visiting www.myspace.com to check the password the page contains obtuse psychological attacks by what are probably Russian intelligence information technology officers.

Is it actually saying two passwords are compromised, rather than two email addresses ?

As far as I’m aware the Hack Check is only checking for email addresses that have been harvested from hacked sites. The point of the check is if you have an email address that has been harvested in this way (hacked site, etc.) then you should change your password at that site.

You say the passwords are encrypted, depending on the encryption method and length, etc. it might well take longer to actually decrypt, but it makes sense to change the password used for said site. If you no longer use myspace.com or the email address for myspace.com then that point is redundant. If you still use it then you should change the password.

Obviously you aren’t using the same password at all sites :wink: