If you use this mobile carrier, you may have stolen your personal data (BGR)

The stars lined up just last week so a significant number of security breaches and data breaches could come to light. The massive Facebook hack in August 2019 is once again haunting more than 533 million users whose personal data ended up in the hands of hackers. Even Mark Zuckerberg’s account was included in the list, but Facebook will not notify users that they may have been affected. A similar hack related to scratched personal data from 500 million LinkedIn accounts was also reported, and the massive database of information was on sale online earlier this week. Then we saw a different data leak that allowed people to get the phone numbers of Facebook users who liked a social networking page. A large number of credit card records and Social Security numbers were then hacked into a platform that sold this type of stolen information, meaning that data had been stolen before this security operation. , but have now been made more widely available. Finally, we also saw Android apps spreading malware in nature and Facebook allowed ads for a malware application on its platform.

To top it off, there is another vulnerability that millions of people need to be aware of. A small mobile operator was unable to protect the personal data of their customers, so everyone was able to access account information simply by entering a phone number into a mobile app.

Today’s offer This automatic jar opener went viral on TikTok and people flooded Amazon to get one. Price:$ 48.99 Available on Amazon, BGR may receive a commission Buy now Available on Amazon BGR may receive a commission

The carrier in question is Q Link Wireless, a mobile virtual network operator (MVNO) with about 2 million US customers. A Reddit user first found the security vulnerability a few months ago, trying to notify the operator several times through customer service and app reviews that revealed the bug. Ars Technica he followed up on this post and his inquiries could have convinced Q Link Wireless to finally fix the security issue.

“Hacking” allowed anyone to install the My Mobile operator’s account and then enter any customer’s phone number to access the data associated with that account. No password was required and the information was accessible to anyone who knew about the security issue.

The mobile app offers a lot of information about the users. Examples include the user’s first and last name, home address, phone call history (incoming / outgoing), text message history (incoming / outgoing), account number, email address and the last four digits of the associated payment card.

The app cannot be used to make any changes to someone’s account or harm their phone number by exchanging a SIM or blocking someone. But Ars states that a potential SIM exchanger could try to use the data to help a Q Link Wireless employee. A simpler type of attack is to spy on the victims. Vulnerability-conscious people could have used the security flaw to track someone’s calls and texts. Abusive spouses, harassers, and others with malicious intent who could target a particular victim could have done so easily.

After ignoring the issue for months, it looks like Q Link Wireless has fixed it, so the data is no longer available to anyone with knowledge of a phone number. It is unclear whether the vulnerability was abused, security company Intel471 reported Ars who found no debates about this security flaw in forums often used by hackers and criminals. But the report notes that there is no way to know if leakage had been abused on a smaller scale.

Ars Technica’s The full report is available at this link.

Today’s offer This automatic jar opener went viral on TikTok and people flooded Amazon to get one. Price:$ 48.99 Available on Amazon, BGR may receive a commission Buy now Available on Amazon BGR may receive a commission

Chris Smith began writing about gadgets as a hobby, and before he knew it, he was sharing his views on technological things with readers around the world. Whenever he doesn’t write about gadgets, he fails to stay away from them, even though he tries desperately. But this is not necessarily a bad thing.

.Source