Norway says Ivanti zero-day was used to hack govt IT systems(bleepingcomputer.com)
bleepingcomputer.com
Norway says Ivanti zero-day was used to hack govt IT systems
https://www.bleepingcomputer.com/news/security/norway-says-ivanti-zero-day-was-used-to-hack-govt-it-systems/
4 comments
And still you will see folks using and/or defending the use of having mobile phones as an identification for messaging apps or as a 2FA.. yes, I’m looking at you Signal users.
Replying in the wrong thread?
Not really, the article stated that some of the PII leaked data are phone numbers
>paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device
And guess who’s still using phone numbers as an identification in their messaging app?
It might not be seen as a direct breach on such apps that promote itself as “privacy focused”, but these breached data eventually will be leaked, and knowing name/phone is more than what’s needed to carry out an advance attack, spear phishing, expoits or even sim swap attacks, either on the phone itself or targeting those specific privacy apps, let alone to unmask people who’s using them, basically the opposite of what private is meant to be.
>paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device
And guess who’s still using phone numbers as an identification in their messaging app?
It might not be seen as a direct breach on such apps that promote itself as “privacy focused”, but these breached data eventually will be leaked, and knowing name/phone is more than what’s needed to carry out an advance attack, spear phishing, expoits or even sim swap attacks, either on the phone itself or targeting those specific privacy apps, let alone to unmask people who’s using them, basically the opposite of what private is meant to be.
As an additional note, the websites for the Norwegian police and the Norwegian Police Security Service (Politiets sikkerhetstjeneste) were both down earlier today due to DDoS attacks. The websites for newspapers owned by the biggest media organization in Norway, Schibsted, were also hit by DDoS attacks today.
Without speculating or trying to attribute the DDoS attacks (not the actual hack), there have been multiple previous occurrences where assorted Russian groups have taken credit for similar kinds of DDoS attacks towards government and media websites. This has seemingly been due to Norway's support of Ukraine and condemnation of Russia in the current war.
Edit: Clarified the last paragraph
[0]: https://www.regjeringen.no/en/dep/id933/