Faith App Pray.com Exposes Millions Through Cloud Misconfig

guest · Nov 20, 2020

Faith App Pray.com Exposes Millions Through Cloud Misconfig
November 20, 2020
https://www.infosecurity-magazine.com/news/faith-app-praycom-exposes-millions/

A popular Christian faith app has unwittingly exposed the personal data of up to 10 million users dating back several years, after misconfiguring its cloud infrastructure, researchers have warned.

Santa Monica-headquartered Pray.com claims to be the “#1 App for daily prayer and biblical audio content” and has been downloaded over a million times from the Play Store.
Researchers at vpnMentor discovered four misconfigured AWS S3 buckets belonging to the company.
Click to expand...

Although it had made private around 80,000 files, it failed to replicate these security measures on its Cloudfront CDN, which also had access to the files. This means a hacker could have compromised personal information on as many as 10 million people, most of whom were not even Pray.com users.

“Cloudfront allows app developers to cache content on proxy servers hosted by AWS around the world – and closer to an app’s users – rather than load those files from the app’s servers. Doing so speeds up the app’s performance considerably,” vpnMentor explained.
Many of the files also contained log-ins from private accounts, the report continued.
Click to expand...

vpnMentor: Report: Popular Christian Faith App Exposes Millions of People to Fraud and Online Attack

Led by Noam Rotem and Ran Locar, vpnMentor’s research team recently discovered that the Christian faith app, Pray.com, has been leaking years’ of private data collected from users.
Pray.com offers daily prayer guidance and similar faith-based audio content and has proven incredibly popular since launching in 2016.

However, Pray.com’s developers failed to properly secure vast amounts of data collected from the app, potentially exposing millions of people to fraud and online attacks.
In fact, most people exposed in Pray.com’s data breach don’t even use the app.
Click to expand...

Log in or Sign up

Faith App Pray.com Exposes Millions Through Cloud Misconfig

guest Guest

Log in or Sign up

Faith App Pray.com Exposes Millions Through Cloud Misconfig

guest Guest

Useful Searches