Stealing police emails, hackers tricking Apple and Facebook user data
- Tram Ho
Both are reputable technology companies, but according to a new report by Bloomberg, both Apple and Meta (Facebook’s parent company) were tricked by hackers into giving them user data. This happened in mid-2021, when the hackers posed as government employees and asked the two companies to give them user data, including IP addresses, phone numbers and even home addresses. .
Usually, law enforcement forces often ask social networking platforms to assist in criminal investigations, by providing user data, such as the owner of an account. While these requests are usually accompanied by a subpoena or judge’s search order, they are not for urgent requests – often in life-threatening situations.
According to security firm Krebs, this makes fake urgent data query requests more and more common. Usually, a hacker must first gain access to a police department’s email system. They will then generate urgent query requests, describing a critical situation that makes it impossible to properly query data, to require companies to provide them with information immediately.
According to Krebs, this proliferation of activity is leading some hackers to sell access to police email systems, mainly for sending fake data queries to social networking platforms.
As reported by Bloomberg, a string of attacks last year was carried out by a hacker group called the Recursion Team. Although this group is now disbanded, many of its members have joined Lapsus$, a hacker group that has emerged recently because of a series of attacks that stole data from many major technology companies, including Samsung, Nvidia. and Microsoft.
In his statement, Meta’s director of policy Andy Stone said: ” We always consider the full legal elements of every data query and use state-of-the-art processes to authenticate those queries. law enforcement and abuse detection We intercept query requests from compromised accounts and work with law enforcement to respond to incidents involving these accounts suspected fraud, as we did in this case .”
In a statement sent to The Verge, Apple said its policy toward law enforcement: ” If government or law enforcement agencies seeking customer data meet the Requirements Information for Law Enforcement and Government Emergencies, trackers for government representatives, and law enforcement will be contacted to confirm with Apple that this urgent query is legitimate. rate. ”
Meta and Apple are not the only companies affected by these fake data queries. Bloomberg said the hacker also contacted Snap with similar requests, but it is unclear whether the company will respond.
Check out The Verge
Source : Genk