A seller by the name SunTzu583 is offering log-in credentials for over one million Gmail and Yahoo accounts.

100,000 Yahoo accounts were stolen from the breach of the 2012 hack of Last.fm which included usernames, email addresses and plain text passwords. An additional 145,000 Yahoo accounts are also on sale from a breach to Adobe and MySpace which include usernames, email addresses and decrypted passwords.

500,000 Gmail accounts, including usernames, email addresses and plain text passwords, come from a breach of the Bitcoin Security Forum and MySpace. An additional 450,000 Gmail accounts are also for sale from various breaches that include Last.fm, Adobe, Dropbox, Tumblr and more.

Users worried about the security of their Gmail or Yahoo account, particularly if their accounts were compromised in any of the data breaches mentioned here, should change their password immediately.

It is also advised that users enable two-factor authentication where it is offered.

Source: Info Security