Have you changed your Facebook password lately? If not, perhaps you should, just to play it on the safe side. According to researchers at VeriSign's iDefense group, a hacker by the name of Kirllos is selling Facebook usernames and passwords , and it appears he has 1.5 million accounts up for grabs.
It isn't yet clear if the supposedly stolen accounts are real or not, and Facebook so far isn't saying anything. But if they are legit, that would work out to about one in every 300 Facebook users with compromised accounts on the black market. Prices for the accounts range from $25 to $45 per 1,000 accounts.
That's a bargain compared to what stolen online accounts typically sell for. According to Symantec, email usernames and passwords usually go for $1 to $20 per account, whereas Krillos is asking for as little as $0.025 per Facebook account.