[su_heading size=”18″]Not even a tech giant like Facebook escapes major security breaches![/su_heading]
A few days ago, penetration tester Orange Tsai from Devcore discovered that someone had attempted to install a backdoor on one of Facebook's corporate servers in an attempt to steal employee usernames and passwords. While it's not clear how successful the script-based exploit was, Tsai noted that the file transfer application hosted on the server had several vulnerabilities that would have given any attacker easy entry.
[su_button url=”https://www.secnews.gr/103244/facebook-video-malware-scam-chrome-users/” target=”blank” style=”glass” background=”#58ce35″ color=”#1218126″ wide=”yes” center=”yes” radius=”round” icon_color=”#ffffff”]Facebook: Video Malware Scam Targets Chrome Users[/su_button]
The attacker could check every employee's email, for example, or even connect to Facebook's virtual private network and gain access to the company's internal operations.
Fortunately, that's a thing of the past. The incident became public because Tsai found the bug and reported it to Facebook (in order to get paid) and waited to make it public until the company had completed its investigation and fixed the bugs. Tsai was eventually rewarded with $10,000. The backdoor is no longer there! It may have humiliated Facebook a little, but it will be forgotten.
However, Facebook security engineer Reginaldo Silva, who worked on the case, stated that the backdoor had actually been placed there by another security researcher and is essentially a white hat act and not a malicious attack.
[su_button url=”https://www.secnews.gr/103430/afierwma-stous-pio-gnwstous-hackers-part-3-ethical-hacher/” target=”blank” style=”bubbles” background=”#ce4135″ color=”#1218126″ wide=”yes” center=”yes” radius=”round” icon_color=”#ffffff”]A tribute to the most famous hackers! Part 3 (Time for ethical hackers)[/su_button]
