Windows 10: Hackers help themselves to data of 2 million T-Mobile customers

Borg 386 · Aug 25, 2018

In a statement, the telecommunications giant said on Thursday that a recent "incident" may have given a cyberattacker brief access to customer records.

On August 20, T-Mobile staff detected an unauthorized entry into the company's network. While the intrusion was rapidly shut down, customer names, billing ZIP codes, phone numbers, email addresses, account numbers, and account types are believed to be involved in the data breach.
Click to expand...

According to the spokesperson, the incident occurred after hackers compromised company servers through an API, although no further technical details have been disclosed.

The company has also not revealed any thoughts behind who may be behind the intrusion, beyond the belief that the threat actors were "international."

T-Mobile says that all affected customers have, or soon will be, notified.
Click to expand...

This is not the first time this year that T-Mobile's cybersecurity practices have come under scrutiny.

In May, researchers uncovered a bug in T-Mobile's website which allowed anyone to access the personal data of customers using only a phone number.

The exploit existed in a subdomain used by company staff members to access internal tools. This subdomain was easy to find via search engines, and once a phone number was tagged onto the end of the web address, the platform would reveal customer information -- including their full name, physical address, billing account numbers, and account records.
Click to expand...

Hackers help themselves to data belonging to 2 million T-Mobile customers | ZDNet

:)

jmcslob · Aug 25, 2018

2 x SSD Raid 0 - is this right?

Hey Fits

Can you list a few helpful hints for T ski ,maybe a step by step how to OR what to look out for*Cool

Brink · Aug 25, 2018

T-Mobile bug let anyone see any customer's account details

A bug in T-Mobile's website let anyone access the personal account details of any customer with just their cell phone number.

The flaw, since fixed, could have been exploited by anyone who knew where to look -- a little-known T-Mobile subdomain that staff use as a customer care portal to access the company's internal tools. The subdomain -- promotool.t-mobile.com, which can be easily found on search engines -- contained a hidden API that would return T-Mobile customer data simply by adding the customer's cell phone number to the end of the web address.

Although the API is understood to be used by T-Mobile staff to look up account details, it wasn't protected with a password and could be easily used by anyone.

The returned data included a customer's full name, postal address, billing account number, and in some cases information about tax identification numbers. The data also included customers' account information, such as if a bill is past-due or if the customer had their service suspended.

The data also included references to account PINs used by customers as a security question when contacting phone support. Anyone could use that information to hijack accounts.

T-Mobile pulled the API offline a day after it was reported in early April by security researcher Ryan Stevenson, who was later awarded $1,000 in a bug bounty.

Stevenson sent ZDNet several screenshots of customer data returned from the working API.

A T-Mobile spokesperson said: "The bug bounty program exists so that researchers can alert us to vulnerabilities, which is what happened here, and we support this type of responsible and coordinated disclosure."

"The bug was patched as soon as possible and we have no evidence that any customer information was accessed," the spokesperson added...
Click to expand...

Read more: T-Mobile bug let anyone see any customer's account details | ZDNet

Corduroy_Jr · Aug 25, 2018

help to remote connect

not sure how to use both programs u 2 suggested, i need more helpful steps thanks

Windows 10: Hackers help themselves to data of 2 million T-Mobile customers

Hackers help themselves to data of 2 million T-Mobile customers

Hackers help themselves to data of 2 million T-Mobile customers

Hackers help themselves to data of 2 million T-Mobile customers

Hackers help themselves to data of 2 million T-Mobile customers - Similar Threads - Hackers help themselves

2 million fonts

2 million fonts

2 million fonts

2 of my 3 drivers Locked by Themselves!

The 773 Million Record "Collection #1" Data Breach

T-Mobile bug let anyone see any customer's account details

How about editing apps themselves for customization?

Millions of Verizon customer records exposed in security lapse

Windows 10 Mobile Already Running on 1 Million Phones