Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hacker Uses Premium Rate Calls To Steal From Instagram, Google, Microsoft (helpnetsecurity.com)

Posted by msmash on from the security-woes dept.

Reader Orome1 writes: Some account options deployed by Instagram, Google and Microsoft can be misused to steal money from the companies by making them place phone calls to premium rate numbers, security researcher Arne Swinnen has demonstrated. Swinnen calculated that, in theory, these options would allow an attacker to milk over 2 million euro per year from Instagram, 432,000 euro per year from Google, and nearly 700,000 euro from Microsoft by using a slew of fake accounts, multiple premium numbers, and different tools and approaches to automate the process.

3 of 37 comments (clear)

  1. Not news by fubarrr · · Score: 3, Interesting

    We had same thing in Russia around 12 - 11 years ago when there were the WAP and premium content craze. There was a guy from carders.su who wrote an MMS exploit that hacked Sony cellphones on A100 OS and made them send premium sms in 2006. The whole Megafon cell network went down as it got DDOSed by the chain reaction of the virus spreading

  2. How much to do this legally? by gurps_npc · · Score: 4, Interesting

    As in, I would love to get a phone number that is 'premium' and then give it out to every website that keeps asking for a phone number.

    Slime keep trying to steal my privacy in exchange for nothing. They abuse the phone number and have no business asking for it. If they want my phone so badly, then PAY every time you call me. After all, I never want you to call me, so why shouldn't you pay to talk to me?

    --
    excitingthingstodo.blogspot.com
    1. Re:How much to do this legally? by pla · · Score: 3, Interesting

      You can have more than one phone number, y'know... :)