White hats spread VKontakte worm after social network doesn't pay bug bounty

guest · Feb 18, 2019

White hats spread VKontakte worm after social network doesn't pay bug bounty
VKontakte flooded with spam over Valentine's Day as part of a revenge prank
February 18, 2019
https://www.zdnet.com/article/white...m-after-social-network-doesnt-pay-bug-bounty/

The incident happened last week, on Valentine's Day, February 14, and was contained within hours after it started, the VKontakte team said in a VK wall post.

To power their worm, Baghosi devs used a vulnerability impacting VK that was discovered by one of its members, and reported to the social network a year before.
Baghosi said VK failed to acknowledge the bug report, and also failed to fix the issue, let alone pay the security researcher for his bug hunting efforts.

The Baghosi team came clean about what they did in a VK post. The VK team initially banned the Baghosi VK page, but later reversed the ban when it became clear the spam flood was just a joke, and no user data was stolen or collected during the attack.
Click to expand...

Log in or Sign up

White hats spread VKontakte worm after social network doesn't pay bug bounty

guest Guest

Log in or Sign up

White hats spread VKontakte worm after social network doesn't pay bug bounty

guest Guest

Useful Searches