"TechWeb Report" March 29 news, according to foreign media reports, recently many effective Uber account information was openly put on the internet black market for sale, the price of each account is only 1 U.S. dollars.
The report said that on the black market website Alphabay, many sellers have put up a series of "X1 Uber account-Global taxis!" "Goods. As long as it costs 1 dollars, anyone can buy a username and password for an Uber account anonymously. Another seller is asking for 5 dollars for each Uber account. And in the product introduction wrote: "I guarantee that these accounts are effective and active." If you buy a large quantity, you can also enjoy a discount. ”
It is understood that as long as the user name and password can access the user's travel records, including some personal details such as home address. In addition, you can see the last 4 digits of the user's credit card number and the expiration date of the credit card.
Uber company representatives said the company has not found signs of hacking.
Analysts say either someone inside the Uber has sold the privacy information or their security measures have been lax. Although Uber says it has not found any signs of hacking, the login data for these accounts may prove that Uber's security system must have been compromised by hackers. This may also mean that these users were hacked by other means by hackers, who obtained their certificates and put them on the internet for sale.
As of now, Uber issued an updated statement saying: "We have conducted an investigation and found no evidence of the invasion." Attempts to fraudulently access or sell accounts are illegal, and we have notified the authorities concerned. This is a good opportunity to remind people to use a higher security username and password, and not to reuse the same certificate on multiple sites and services. "(Ajukhan)