// Hacking NEWS // A hacker Has Hacked Tens of Thousands of GPS With the "123456" Password

in #news5 years ago (edited)

Access to user accounts has not only made possible to geolocate vehicles around the world but even - in some cases - to shut them down remotely.

FI-nui7711-istock-thinkstock.jpg
Source

A hacker who calls himself L&M has managed to hack tens of thousands of user accounts for two professional GPS apps. In this case, 7.000 for iTrack and 20.000 for ProTrack. These mobile apps, which are available on iOS and Android, allow businesses to manage their vehicle fleets. Access to user accounts has allowed the hacker to geolocate vehicles around the world.

In some cases, he could even stop their engine if they drove at a slow pace. There is indeed an option of this type in these two applications, but it requires a specific installation.

“I can absolutely make a big traffic problem all over the world,” L&M said. “I have fully [sic] control hundreds of thousands of vehicles, and by one touch, I can stop these vehicles engines.” says L&M to Motherboard, who has obtained evidence of this hacking.

Rahim Luqmaan, the owner of Probotik Systems, a South African company that uses ProTrack, said in a phone call with Motherboard that it’s possible to use ProTrack to stop engines if a technician enables that function when installing the tracking devices.
“That makes it more dangerous,” Luqmaan said about the data breach. “He can actually mess around with [...] our clients and customers.”

The hacker has been rewarded

This was particularly easy because user accounts had a default password of "123456". To realize it, it was enough to analyse the apps’ code by reverse engineering. The access to the accounts also allowed to get personal data: names, phone numbers, e-mail addresses, postal addresses, etc.

The hacker says he made this piracy to alert publishers, who are two companies based in China. Besides, he contacted them and asked them for a reward ... what he would have got.

What a nice Withe-Hat hacker! Even a hero needs money to make a living, no?

“My target was the company, not the customers. Customers are at risk because of the company,” L&M told Motherboard in an online chat. “They need to make money, and don't want to secure their customers.”

Source: Motherboard

Stay Informed, Stay Safe

DQmdpsoEfLe5nRg4Q1oKWHNjLdMnAucCYfRou1yF5Yiwrzs.png

DQmNuF3L71zzxAyJB7Lk37yBqjBRo2uafTAudFDLzsoRV5L.gif

Coin Marketplace

STEEM 0.20
TRX 0.13
JST 0.030
BTC 66824.20
ETH 3503.41
USDT 1.00
SBD 2.62