Cyber criminals are trying to break into Carbonite backup service using the leaked passwords of millions.

Carbonite has alerted its users to the fact that on Tuesday it had detected unauthorized attempts to access a number of accounts.

“This activity appears to be the result of a third party attacker using compromised email addresses and passwords obtained from other companies that were previously attacked. The attackers then tried to use the stolen information to access Carbonite accounts,” Carbonite said in a blog post.

Carbonite has reset all passwords and has sent out emails to its customers detailing how to reset passwords. Unfortunately, many customers are complaining that the email appears to be a phishing scheme. The emails contain two links that appear to point to suspicious domains.

Carbonite says it’s working on rolling out additional security features to protect user accounts, including two-factor authentication and increased security review.

Source: Security Week