A Russian gang is said to have stolen more than one billion internet credentials, possibly making it the biggest heist of its kind, according to Enabling two-factor authentication is also a must, Nicholas Percoco, vice president of strategic services at security firm Rapid7, told Business Insider.