News

Hackers claim to expose phone information of 4.6 million Snapchat users

SnapChat-HackPhone numbers paired with user names of over 4.6 million alleged Snapchat users were posted online by hackers, a few days after a security research group claimed a vulnerability in the social sharing service that could allow attackers to match phone numbers to Snapchat accounts.

“This database contains username and phone number pairs of a vast majority of the Snapchat users,” said a post on website SnapchatDB.info. The account has since been suspended, apparently by the hosting service.

The information was acquired through the recently patched Snapchat exploit and is being shared with the public to raise awareness on the issue, according to the post. “The company was too reluctant at patching the exploit until they knew it was too late and companies that we trust with our information should be more careful when dealing with it,” it added.

The hackers said they had “censored” the last two digits of the phone numbers in order to minimise spam and abuse, but asked people to contact them for the uncensored database, which they may agree to release under certain circumstances.

Gibson Security had published proof-of-concept code last week that takes advantage of the “find_friends” feature in the Snapchat application programming interface (API) to iterate and match the phone numbers of users to their Snapchat accounts in a short period of time. Gibson first revealed the vulnerability and other issues in August.

“Theoretically, if someone were able to upload a huge set of phone numbers, like every number in an area code, or every possible number in the U.S., they could create a database of the results and match usernames to phone numbers that way,” Snapchat wrote in response last week. “Over the past year we’ve implemented various safeguards to make it more difficult to do,” it added. “We recently added additional counter-measures and continue to make improvements to combat spam and abuse.”

After the release of the SnapchatDB database, Gibson said in a Twitter message that it knew nothing about SnapchatDB, but it was a matter of time until something like it happened. “Also the exploit works still with minor fixes,” it added.

“People tend to use the same username around the web so you can use this information to find phone number information associated with Facebook and Twitter accounts, or simply to figure out the phone numbers of people you wish to get in touch with,” according to the post on SnapchatDB.info.

 

Originally published on IDG News Service (Bangalore Bureau). Click here to read the original story. Reprinted with permission from IDG.net. Story copyright 2024 International Data Group. All rights reserved.
Previous ArticleNext Article

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

GET TAHAWULTECH.COM IN YOUR INBOX

The free newsletter covering the top industry headlines