Hacker behind Hacking Team breach publishes how-to guide

April 20, 2016

Phineas Fisher, the hacker who claimed responsibility for breaching Hacking Team last year published an explainer guide detailing his process in executing the attack.

The hacker’s how-to post on PasteBin stated that he found MongoDB databases without authentication, a common flaw that many companies, including Verizon Enterprise and multiple voter groups, failed to secure. “The audio that RCS records is stored in MongoDB with GridFS. The audio folder in the torrent came from this,” he wrote. “They were…

Source link

Hacker behind Hacking Team breach publishes how-to guide