Taking over Uber accounts through voicemail(blog.assetnote.io)

15 pointsby infosecauvor 5 Jahren5 comments

blog.assetnote.io

Taking over Uber accounts through voicemail

https://blog.assetnote.io/2021/06/27/uber-account-takeover-voicemail/

5 comments

dnsvor 5 Jahren

I know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!

mechboyvor 5 Jahren

Uber will never know the severity of this bug until several user accounts got compromised by someone

zealshamvor 5 Jahren

I’ll say Uber rejected this due to highly unlikely user interaction required .

infosecauvor 5 Jahren

There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.

fzionismvor 5 Jahren

Very interesting,