Monday, October 21, 2013

Verizon Wireless hack allowed access to any numbers,text

A URL hack may have exposed texting data for tens of millions of Verizon customers. The URL Hack allowed attackers to see who Verizon users texted and when, provided they had a subscriber-level login to the carrier's website.

Who users texted and whenThe hack centers on the Verizon website's "download to spreadsheet" function, which allows subscribers to download a CSV file of the time, date, and recipient of their recent texts. Unfortunately, the URL for that download contained the subscriber's phone number, and simply changing the phone number in the URL would let a user download that number's spreadsheet. 

Update: "Verizon takes customer privacy seriously. As soon as this was brought to the attention of our security teams, we addressed it, and no customer information was impacted."