Collaborate Disseminate
I just came across to a currently active phishing campaign that’s using Google’s Firebase as a hosting infrastructure for the purpose of enticing users into falling victim into a rogue and fake “Facebook Appeal” themed phishing campaign.You can check o… Continue reading Massive “Facebook Appeal” Themed Phishing Campaign Uses Google’s Firebase Spotted in the Wild – An OSINT Analysis
Cybercriminals are taking advantage of the Google name and the cloud to convince victims into handing over their login details. Continue reading Crooks Tap Google Firebase in Fresh Phishing Tactic
Researchers said 1 million user sessions could have been exposed to the campaign, which downloads the Shlayer trojan. Continue reading Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
Mobile security researchers have discovered unprotected Firebase databases of thousands of iOS and Android mobile applications that are exposing over 100 million data records, including plain text passwords, user IDs, location, and in some cases, finan… Continue reading Thousands of Mobile Apps Expose Their Unprotected Firebase Hosted Databases
Appthority published research on its discovery of a new HospitalGown threat variant that occurs when app developers fail to require authentication to Google Firebase databases. Appthority security researchers discovered the HospitalGown vulnerability i… Continue reading 3,000+ mobile apps leaking data from unsecured Firebase databases
Appthority has discovered a significant mobile data vulnerability related to Google Firebase which has resulted in the exposure of a wide range and large amounts of sensitive data through thousands of mobile apps. The exposure is not due to malicious c… Continue reading Appthority Discovers Thousands of Apps with Firebase Vulnerability Exposing Sensitive Data