Cyber-Attack-Analysis

사이버보안 사례 연구: 2020년 Virgin Mobile KSA 침해 사고 📌 요약 2020년, 주요 보안 사고로 Virgin Mobile KSA가 침해되어 직원 통신 및 1,000명 이상의 사용자 개인 정보를 포함한 민감한 데이터가 도난당했습니다. 이 저장소는 공격 벡터, 악용된 기술적 취약점, 그리고 이후 다크 웹에서 판매된 데이터 유출로 이어진 전략적 실패에 대한 종합적인 분석을 제공합니다. 🔍 공격 분석 작동 방식 이 침해 사고는 패치되지 않은 취약점을 통한 초기 접근 후 내부 네트워크 스니핑이 이어진 전형적인...

askus.virginmobile.com XSS vulnerability

Vulnerable URL: http://askus.virginmobile.com/system/selfservice.controller?CONFIGURATION=1001ID=1=falseOFFSET==VIEWARTICLEID=111904ARTICLECLICK=1ARTICLENAME=2%20How%20to%20use%20Web%20Safe%20forumsearch%20search:websafe%20how%20to=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details:...

virginmobile.ca XSS vulnerability

Vulnerable URL: http://www.virginmobile.ca/en/support/step-by-step-phone-guides.html?p=x" Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 18:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24074 Google...

virginmobile.ca XSS vulnerability

Vulnerable URL: http://www.virginmobile.ca/fr/support/faq.html?q=x";alert/XSSPOSED///=NAV:118 Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 18:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24074 Google...

virginmobile.ca XSS vulnerability

Vulnerable URL: http://www.virginmobile.ca/en/support/faq.html?q=x";alert/XSSPOSED///=NAV:118 Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 18:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24074 Google...

virginmobile.ca XSS vulnerability

Vulnerable URL: http://www.virginmobile.ca/en/support/index.html?topic=myaccount'=FOT:56 Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 18:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24074 Google...

Virgin Mobile Cross Site Scripting

Document Title: =============== Virgin Mobile Client Side XSS Vulnerability Release Date: ============= 2015-10-22 Common Vulnerability Scoring System: ==================================== 3.4 Product & Service Introduction: =============================== Virgin Mobile is a celluar company...

6 Million Virgin Mobile users vulnerable to Hackers

Virgin Mobile customers beware: Your phone number is the key to your personal information. According to independent developer Kevin Burke, who warned Virgin Mobile USA customers about a glaring security hole in the phone company's account login protocol said, "If you are one of the six million...

Sprint Responds to Developer's Disclosure of Virgin Mobile Security Shortcoming

A Sprint spokeswoman today responded to a software developer’s claim that millions of Virgin Mobile users are vulnerable to attacks due to inadequate authentication mechanisms. In an email sent to Computerworld, Stephanie Vinge Walsh said Virgin Mobile, a subsidiary of Sprint, has multiple...

Developer Warns Millions of Virgin Mobile Subscribers About Authentication Flaw

An Alamo, Texas developer on Monday warned Virgin Mobile U.S. subscribers that their accounts can be hacked after the company failed to respond with a fix. “I reported the issue to Virgin Mobile a month ago and they have not taken any action, nor informed me of any concrete steps to fix the...