Uber security breach by 18-year-old Hacker!
Uber security breach proves that the largest companies can be hacked by teenagers! this news will undoubtedly shock you..
How Uber security breach happened?
Uber recently experienced a cyberattack where an 18-year-old hacker accessed their systems by launching a successful social engineering attack on an employee. The hacker used stolen employee credentials to launch an MFA (Multi-Factor authentication) Fatigue attack. It is an attack where a victim receives multiple requests from their MFA application till it bothers them out leading them to eventually accept the request. The teenage attacker did not disclose how he was able to gain the Uber employee password.
After using the stolen credentials, he sent multiple MFA requests for over an hour to the employee and then messaged them impersonating an Uber IT representative advising the employee to accept the requests in order to stop them. This resulted in the attacker gaining full access to Uber’s internal systems. This is a type of social engineering attack.
The attacker was able to breach and gain full access to the company’s internal systems, email dashboard, and Slack server including Uber IT systems and the company’s security software and Windows domain. When the attacker breached the Uber Slack server, he posted messages informing employees that the company has been hacked, however, this was brushed off by employees as a prank or joke not knowing the legitimacy of the post.
It didn’t end there, the attacker was also able to gain access to the company’s HackerOne bug bounty program, where he commented on all of the company’s bug bounty tickets. HackerOne is a platform that enables security researchers to privately disclose flaws in Uber applications and systems in exchange for financial compensation. This platform is intended to keep these vulnerability reports private until a patch is available to prevent attackers from employing them as a weapon.
Prior to being blocked from Uber’s bug bounty program, the attacker had already downloaded all bounty vulnerability reports. This most likely includes security vulnerability reports that have not yet been patched, posing serious security risks to Uber. It is likely that the attacker would sell these reports on the Black Market for the vulnerabilities to be taken advantage of.
On the bright side, no sensitive user information was breached, according to Uber. And all apps and services provided by Uber such as Uber Eats, Freight, and the Uber Driver app, are still in use.
This could have been prevented from the employee’s side if he was educated and updated on the trending cyberattacks and social engineering techniques. As many new trends in the cyber world emerge, an organization’s workforce should know the latest updates. Awareness is key in being a step ahead of cybercriminals. The addition of Multi-Factor Authentication in your systems is a vital step to gain an extra layer of protection but an aware and educated workforce will strengthen the human shield against attempted cyberattacks.
Infoshield can help you educate your employees and to strengthen your cyber shield.
Share this article:
Popular
![Keeping Our Kids Safe Online](https://cerebra.sa/wp-content/uploads/2024/07/Poster-550x375.jpg)
Keeping Our Kids Safe Online
A Guide For Keeping Your Kids Safe Online Parents and all who are concerned about the well-being of our young kids in this digital world. Today we will discuss a topic of utmost importance: digital safety for kids. Yes, the Internet can be a very dangerous place for our young kids , especially with the spread of phishing scams. So, let us dive deeper and present to you, in this comprehensive article, a comprehensive guide on digital safety for kids. What every parent needs to pay attention to. Internet risks for kids: The internet has become a big part of ...
17th Jul 2024![Could you be hacked through Slack?](https://cerebra.sa/wp-content/uploads/2024/06/2-550x375.jpg)
Could you be hacked through Slack?
Could you be hacked through Slack? The usage of collaboration platforms such as Microsoft Teams and Slack has significantly increased, with nearly 80% of employees utilizing them. These platforms are designed to be convenient and easily manageable for daily conversations within organizations. However, what makes them easy and convenient also renders them vulnerable to cyber threats and attacks. In 2021, for instance, 780 gigabytes of data from the gaming giant Electronic Arts (EA) were breached through Slack! During the same year, a security vulnerability in Microsoft Teams was exploited to launch a widespread cyber attack on ...
12th Jun 2024![Tips To Be Cyber Protected While Traveling](https://cerebra.sa/wp-content/uploads/2024/04/1-550x375.jpg)
Tips To Be Cyber Protected While Traveling
Goodbye worry! A safe journey in the digital world With all the modern wonders of the digital world, we trust communication technologies on our journeys. There is no doubt that the travel experience is always more beautiful and enjoyable, but it can also pose a range of risks, especially when it comes to cybersecurity. Travelers may fall victim to phishing, Wi-Fi network spying, and theft of their personal data, which can make their journey filled with worries and tension. With the increasing prevalence of cyber threats, it is essential for travelers to follow some guidelines to protect their devices and ...
1st Apr 2024![Push Authentication: A New Era in Multi-Factor Authentication](https://cerebra.sa/wp-content/uploads/2024/02/Cover-550x375.png)
Push Authentication: A New Era in Multi-Factor Authentication
Want To Say Goodbye To Passwords and OTP Codes? Discover Push Authentication! It is easy for your password to be compromised through phishing attacks, even if it meets the cybersecurity strong password standards and is difficult to predict So we must get to know the technique of Push based Authentication. Some may recommend that you use Multi-Factor Authentication (MFA) to increase your security. Multi-Factor Authentication (MFA): MFA is the process of logging into your account through multiple steps. It requires you to enter more information, not just your password. But there is another obstacle that arises when using such ...
14th Feb 2024![The Difference Between Phishing Attacks](https://cerebra.sa/wp-content/uploads/2023/07/Phishing-Attacks-550x375.jpg)
The Difference Between Phishing Attacks
The Difference Between Phishing Attacks Phishing attacks are harmful attacks used by criminals to steal personal and financial information from individuals and businesses. Attacks on individuals and businesses are becoming more common as we use the internet and technology more often in our daily lives. Phishing attacks involve the use of dishonesty and fraudulent methods to fool consumers into believing they are interacting with the trustworthiness of an unsuspecting destination, such as banks, email companies, or social media platforms. But what is the difference between phishing attacks? How can individuals and organizations protect themselves from such attacks? That is what ...
17th Jul 2023![Understanding of the Vishing Meaning](https://cerebra.sa/wp-content/uploads/2023/07/Voiceover-hack-100-1-550x375.jpg)
Understanding of the Vishing Meaning
Understanding of the Vishing Meaning Vishing, a combination of “voice” and “phishing,” is a sophisticated form of cybercrime that exploits voice communication to trick individuals and extract sensitive information. In this comprehensive guide, we will explore the meaning of it, the dangers associated with it, and effective methods to protect yourself against these malicious attacks. What is Vishing meaning? Vishing refers to the fraudulent practice of using telephone services to trick individuals into revealing personal and financial information. Scammers often pose as trusted organizations or individuals to gain their victims’ trust. By using social engineering tactics and manipulating ...
5th Jul 2023![How could Artificial Intelligence tools threaten cybersecurity](https://cerebra.sa/wp-content/uploads/2023/05/كيف-يمكن-أن-تهدد-أدوات-الذكاء-الاصطناعي-الأمن-السيبراني-100-550x375.jpg)
How could Artificial Intelligence tools threaten cybersecurity
How could Artificial Intelligence tools threaten cybersecurity? As Artificial Intelligence Tools become more sophisticated, they can be used to launch cyber attacks that are more complex and difficult to detect. In this article, we will explore how AI tools could threaten cybersecurity and what measures can be taken to mitigate these threats. Artificial Intelligence (AI) became popular today, and it is one of the most important terminologies in our current era, though it has been around since the 1950s. AI relies on the development of systems and technologies that help to do tasks by the simulation of human intelligence ...
11th May 2023![Cerebra is participating at GISEC 2023](https://cerebra.sa/wp-content/uploads/2023/03/GISEC-Annoucment-550x375.png)
Cerebra is participating at GISEC 2023
We are thrilled to announce that we are going to GISEC 2023 and would like you to join us! Visit Cerebra at GISEC 2023 Hall #4 stand SP62 in Dubai World Trade Center from 14-16 March. GISEC Global is the leading gathering ground for the cybersecurity community worldwide. Top cybersecurity enterprises from 40 countries, CISOs from major corporations across the Middle East, Africa & Asia, government dignitaries and cyber leaders, regional and international innovators, and global experts collaborated to lead cybersecurity transformations across sectors and nations decisively. Get a chance to preview our latest Cybersecurity products: PhishGuard is the Phishing stimulations solution that raises the employees cybersecurity awareness ...
13th Mar 2023![6 Tips to create a strong password easily!](https://cerebra.sa/wp-content/uploads/2023/02/6-نصائح-للحصول-على-كلمة-مرور-قوية-550x375.jpg)
6 Tips to create a strong password easily!
Create a strong password easily! Today it’s very important to everyone who have an account either on social media or any other websites or services to Create a strong password, because you have to treat your password as your best stuff’s and protect it from others. Learn now the easiest and best tips you have to follow to make a strong password.. What is Password? A password is a string of characters that provides access to a digital system or service. It is a crucial security measure that helps to protect sensitive information from unauthorized access. Passwords can be as simple as a word ...
1st Feb 2023