Information Leaked From JusTalk For Months

It turns out that one of the important databases of the popular application JusTalk has been open for months. This database also contains sensitive information.

There are many socializing or messaging applications on the internet. The question of how these applications ensure their security also comes up frequently. Especially Facebook, WhatsApp, Instagram Platforms like these often struggle to respond to this issue.

On the other hand, there are also smaller social networks and messaging applications. Some of these applications are trying to stand out with points such as privacy and some security. JusTalk He doesn’t seem to care that much about this part of the business.

They left the server exposed

cyber security researcher Anurag Sen, JusTalk noticed that a database on a Huawei server in China had been exposed for months. Discovering the vulnerability in early June, Sen observed that even at that time, new information was recorded in the database. This database is quite large and contains data that is not encrypted in any way. So much so that all one has to do to access the data is to open a browser on their computer and then server’s IP address typing in the search bar.

Moreover, the information on the server is also very sensitive: call dates, online locations, online times, calls, called numbers, dialed numbers, Messages Many sensitive information such as these are among these data. Database hundreds of GB and it is not known exactly how many people’s data was exposed. It is stated that the application has around 20 million users. In addition, 1 million children use the JusTalk Kids version.

RELATED NEWS

Instagram Announces New Features to Upgrade the Messaging Experience

After Sen revealed the situation JusTalk shut down the server is stated. The interesting thing is that it seems that someone who discovered this vulnerability before asked for a ransom from JusTalk. It is unclear whether this person received the ransom. JusTalk did not make a statement on the subject.

Source :
https://www.techradar.com/news/justalk-has-been-leaking-user-info-for-months


source site-37