Taking over Uber accounts through voicemail(blog.assetnote.io)

15 pointsby infosecau5 năm trước5 comments

blog.assetnote.io

Taking over Uber accounts through voicemail

https://blog.assetnote.io/2021/06/27/uber-account-takeover-voicemail/

5 comments

dns5 năm trước

I know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!

mechboy5 năm trước

Uber will never know the severity of this bug until several user accounts got compromised by someone

zealsham5 năm trước

I’ll say Uber rejected this due to highly unlikely user interaction required .

infosecau5 năm trước

There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.

fzionism5 năm trước

Very interesting,