Un pirate expose les données de SMS-XBomber
A data broker claims to have obtained 2,014 records linked to SMS-XBomber, a GitHub project designed to flood phone numbers with messages. The data, allegedly stored in an exposed Firebase database, includes usernames, email addresses, phone numbers, and crucially, passwords stored in plain text. This represents a significant risk due to the potential for immediate password compromise and the ability to map user activity to targeted phone numbers.
A data broker has reported acquiring 2,014 records associated with SMS-XBomber, a GitHub project intended for sending massive messages to a single phone number. The broker discovered an exposed Firebase database containing this information. The records include usernames, email addresses, phone numbers, and, most concerningly, passwords stored in plain text, requiring no cracking to access.
SMS-XBomber is described as a tool for conducting ‘DoS telephone’ attacks by repeatedly sending messages to a target number. The data broker’s discovery highlights a vulnerability beyond typical web application leaks.
The exposed database contains fields such as ‘active’, ‘allattk’, ‘email’, ‘lattk’, ‘name’, ‘pass’, and ‘phone’, providing insight into the project's user base and their targeting behavior. The ‘allattk’ and ‘lattk’ fields are particularly noteworthy, potentially revealing connections between users and targeted phone numbers.
Furthermore, the presence of plain-text passwords significantly elevates the risk. The broker also noted that the ‘phone’ field corresponds to the attacker’s phone number, adding another layer of complexity to the potential misuse of this data.
The incident underscores the importance of securing Firebase databases and the risks associated with storing sensitive information, such as passwords, in an unencrypted format. The data could be used to identify and target individuals who have used the SMS-XBomber tool.