Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Friday September 01 2017, @04:04PM   Printer-friendly
from the low-hanging-fruit dept.

One or more hackers have been stealing celebrities' e-mail addresses, phone numbers, and other personal information by exploiting a bug on Instagram's servers, the company said Thursday.

Researchers from antivirus provider Kaspersky Lab said they recently spotted hackers in an underground forum advertising unnamed celebrities' personal details. In an e-mail, a Kaspersky Lab representative said the researchers privately reported a data-leaking bug to Instagram. The Kaspersky Lab researchers went on to say that exploiting the bug was "quite labor intensive" because each attack had to be done manually rather than using an automated script to bypass mathematical calculations Instagram performs to prevent abuse.

To exploit the bug, according to Kaspersky Lab, attackers used the outdated Instagram mobile app—specifically version 8.5.1, which was released last year—to select the password-reset option. To capture the request, the attackers sent it to a Web proxy rather than the real Instagram servers. The attackers then modified the captured request to substitute the username sent to the Web proxy with the username of targeted celebrities. The Instagram server would then send a JSON-formatted response that included the target's personal information. While the hackers used the outdated app to exploit the bug, the attack worked against all Instagram users, regardless of the app version they used.

A representative from the Facebook-owned photo-sharing service, meanwhile, said the exploited flaw resided in an Instagram programming interface. The representative said Instagram officials know of at least one person who actively exploited the bug.

According to Metro, this bug was also responsible for the hack into Selena Gomez's Instagram account earlier this week.

Instagram did note that no passwords were leaked as a result of this hack.

Sigh. Another day, another hack.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by looorg on Friday September 01 2017, @04:51PM (2 children)

    by looorg (578) on Friday September 01 2017, @04:51PM (#562585)

    No outrage about naked female celebrity pics? This can't be that serious then.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Friday September 01 2017, @05:24PM

    by Anonymous Coward on Friday September 01 2017, @05:24PM (#562609)

    Naked female celebrity pics would be an outrage. Provide naked male celebrity pics instead.

  • (Score: 4, Insightful) by KilroySmith on Friday September 01 2017, @07:25PM

    by KilroySmith (2113) on Friday September 01 2017, @07:25PM (#562678)

    Have you seen what passes for female celebrity clothing these days? Naked is barely different.

    And, remember, "all publicity is good publicity". Have there been, like, hundreds of "naked selfie stolen from phone" events, such that every single celebrity and near celebrity probably has friends that have been victimized? And yet, female celebrities continue to take and store naked selfies on their phones.