#INSTAGRAM HACKING SMS OTP CODE#
The service then offers to text a code to the mobile number registered with the account to reset the password and it’s this option that allows hackers a way in using the SS7 vulnerability. In a video demonstrating the compromise, Positive Technologies researchers attempt to log-in to a user’s Facebook account. For example, with Facebook, if you do not elect to have a passcode sent to your phone then a hacker could not take over your account using the SS7 vulnerability.” The result is that, instead of strengthened security, in some instances adding a mobile phone number actually introduces the door hackers can exploit. Rather than fixing the underlying vulnerability, many services are being encouraged to add a layer of protection built on this flawed global telecommunications network. The issue is that the telecoms industry, as a whole, appears to be turning a blind eye. Positive Technologies’ researchers have videoed themselves demonstrating the hack against Facebook and WhatsApp accounts, with the owner’s permission, proving the dangers of this authentication method.Īlex Mathews, technical manager EMEA of Positive Technologies explains, “The fact that the SS7 network has security flaws is indisputable as has been proven by many researchers, including our own.
Facebook, WhatsApp, Telegram, Twitter and many other online services, offer password resets via SMS message but instead of strengthening security, this ability actually introduces a vulnerability that hackers can, and will, exploit. London (UK). Positive Technologies, a leading provider of vulnerability assessment, compliance management and threat analysis solutions, today confirmed its researchers have exploited a flaw in the SS7 protocol to intercept one time passcodes (OTP) used by many online services to reset passwords. Positive Technologies’ researchers able to compromise many popular social media sites by hacking SS7 network, intercepting an OTP, resetting passwords and taking ownership of accounts
0 kommentar(er)
