18 C
Jaipur
Saturday, October 31, 2020

Microsoft Bing Server Leaks Search Queries and Device Details

Must read

India sales hit a high and other things Apple set new record of in 2020

Apple recently announced its quarterly results and revealed some rather interesting numbers. During an investors’ call, Apple CEO Tim Cook and CFO Luca Maestri...

Here’s the first IR night-vision rugged smartphone – shame about the screen resolution

Doogee S96 Pro - $239.99 pre-order at Aliexpress(£191.06/AU$431.93)The latest rugged smartphone from Doogee is now available to pre-order. Its main selling point is a...

Facebook Taken Down Number of Political ads due to Technical Flaws

Facebook on Thursday acknowledged that a technical error in its systems caused a variety of ads from both political parties to be improperly paused....

Security researchers from WizCase uncovered a massive data leak in the Microsoft Bing mobile app that exposes search queries, device details, and GPS coordinates.

Ata Hakcil uncovered the massive leak in the server owned by Microsoft for logging data related to its Bing mobile app.

Bing app used to perform millions of searches per day and it has more than 10,000,000 downloads on Google Play alone.

Microsoft Bing Server Data Leak

Hakcil confirmed his findings by running a search for “Wizcase” through a mobile app and while checking with the unprotected bing server “he found his information, including search queries, device details, and GPS coordinates, proving the exposed data comes directly from the Bing mobile app.”

The exposed server has records of search queries from more than 70 countries. The server believed to have exposed more than 6.5TB log files and the storage growing by 200GB per day.

According to the Wizcase scanner “server was password protected until the first week of September. Our team discovered the leak on September 12th, approximately two days after the authentication was removed.”

Users who used bing mobile app for searching in the meantime has been exposed is at risk. The following are the data exposed that includes;

  • Search Terms in clear text excluding the ones entered in private mode
  • Location Coordinates
  • The exact time of the search
  • Firebase Notification Tokens
  • Coupon Data
  • URLs clicked from search results
  • Device model
  • Operating System
  • Unique ID(ADID, deviceID, devicehash)

The issue was reported to MSRC – Microsoft Security Response Center by September 13th and the server was secured on September 14.

In the meantime, researchers observed that Meow hackers attacked and deleted nearly the entire database. The second Meow attack on the server on September 14.

Meow hackers are known for destroying unsecured databases, they use some bots which overwrites all of the data, effectively destroying the contents of the database.

The data was exposed to all types of hackers and scammers, having the data attackers can launch a variety of attacks against users of the Bing mobile app.

If you are a bing mobile app user, pay a bit more attention to the when opening emails from unknown senders.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Also Read

A Bug With Firefox for Android Let Attackers Hijack without user Interaction on the Same WiFi Network

Top 10 Best App Locks and Privacy Lock for Android Devices in 2020

Source link

- Advertisement -

More articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest article

India sales hit a high and other things Apple set new record of in 2020

Apple recently announced its quarterly results and revealed some rather interesting numbers. During an investors’ call, Apple CEO Tim Cook and CFO Luca Maestri...

Here’s the first IR night-vision rugged smartphone – shame about the screen resolution

Doogee S96 Pro - $239.99 pre-order at Aliexpress(£191.06/AU$431.93)The latest rugged smartphone from Doogee is now available to pre-order. Its main selling point is a...

Facebook Taken Down Number of Political ads due to Technical Flaws

Facebook on Thursday acknowledged that a technical error in its systems caused a variety of ads from both political parties to be improperly paused....

This is the cheapest 4K laptop right now, by a mile

Chuwi AeroBook Plus 4K laptop - $559.99 at BanggoodThis laptop from little-known manufacturer Chuwi is the most affordable 4K machine on the market. It...