Re:Norway says Ivanti zero-day was used to hack govt IT systems
by tamimio on Friday July 28, 2023 @05:44PM
(#36913774)
Not really, the article stated that some of the PII leaked data are phone numbers
>paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device
And guess who’s still using phone numbers as an identification in their messaging app?
It might not be seen as a direct breach on such apps that promote itself as “privacy focused”, but these breached data eventually will be leaked, and knowing name/phone is more than what’s needed to carry out an advance attack, spear phishing, expoits or even sim swap attacks, either on the phone itself or targeting those specific privacy apps, let alone to unmask people who’s using them, basically the opposite of what private is meant to be.
>paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device
And guess who’s still using phone numbers as an identification in their messaging app?
It might not be seen as a direct breach on such apps that promote itself as “privacy focused”, but these breached data eventually will be leaked, and knowing name/phone is more than what’s needed to carry out an advance attack, spear phishing, expoits or even sim swap attacks, either on the phone itself or targeting those specific privacy apps, let alone to unmask people who’s using them, basically the opposite of what private is meant to be.