Weak passwords let a hacker access internal Sprint staff portal

guest · Aug 25, 2018

Weak passwords let a hacker access internal Sprint staff portal
August 25, 2018
https://techcrunch.com/2018/08/25/hacker-accessed-sprint-portal-customer-data/

Now, Sprint is the latest phone giant to admit a security lapse, TechCrunch has learned.

Using two sets of weak, easy-to-guess usernames and passwords, a security researcher accessed an internal Sprint staff portal. Because the portal’s log-in page didn’t use two-factor authentication, the researcher — who did not want to be named — navigated to pages that could have allowed access customer account data.

Sprint is the fourth largest US cell network with 55 million customers.

A screenshot shared with TechCrunch showed that anyone with access to this portal allowed the user to conduct a device swap, change plans and add-ons, replenish a customer’s account, check activation status and view customer account information.
Click to expand...

EASTER · Aug 25, 2018

They'll have to follow up on it.

Looks like better now then later.

Log in or Sign up

Weak passwords let a hacker access internal Sprint staff portal

guest Guest

EASTER Registered Member

Log in or Sign up

Weak passwords let a hacker access internal Sprint staff portal

guest Guest

EASTER Registered Member

Useful Searches