#default-credentials

[ follow ]
#iot-security #bluetooth-vulnerabilities #reverse-engineering #gobruteforcer #botnet #brute-force-attacks
fromTheregister
2 weeks ago

Bankrupt scooter startup's single key controlled everything

A closer look at the Android app and Bluetooth traffic showed that locking, unlocking, and basic status checks all occur locally over Bluetooth, with the cloud mostly along for the ride. Before accepting commands, the scooter runs a simple authentication check: it sends a short challenge, the app replies with a cryptographic response, and access is granted. It's designed to stop random passers-by from hopping on and riding off. In theory, at least.
Information security
Information security
fromThe Hacker News
2 weeks ago

GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials

GoBruteforcer compromises crypto and blockchain project servers to build a botnet that brute-forces FTP, MySQL, PostgreSQL, and phpMyAdmin credentials.
[ Load more ]