Technoglitch
Core Member
Hackers gained entry to Facebook’s internal corporate network for several months, with access to hundreds of the social network’s employee usernames and passwords.
The hackers, which were actively exploiting Facebook’s network in July and September last year and possibly as recently as February this year, were discovered by a security researcher performing penetration testing on Facebook’s corporate network.
Having discovered seven security vulnerabilities with Facebook’s corporate tools, including a file transfer service, Devcore security researcher Orange Tsai foundthat at least one hacker, possibly two, had compromised Facebook and were operating within its corporate network.
Tsai said: “While collecting vulnerability details and evidences for reporting toFacebook, I found some strange things on web log.
“The hacker created a proxy on the credential page to log the credentials of Facebook employees. These logged passwords were stored under web directory for the hacker to use [collect] every once in a while.”
Facebook corporate network hack discovered by security researcher | Technology | The Guardian
The hackers, which were actively exploiting Facebook’s network in July and September last year and possibly as recently as February this year, were discovered by a security researcher performing penetration testing on Facebook’s corporate network.
Having discovered seven security vulnerabilities with Facebook’s corporate tools, including a file transfer service, Devcore security researcher Orange Tsai foundthat at least one hacker, possibly two, had compromised Facebook and were operating within its corporate network.
Tsai said: “While collecting vulnerability details and evidences for reporting toFacebook, I found some strange things on web log.
“The hacker created a proxy on the credential page to log the credentials of Facebook employees. These logged passwords were stored under web directory for the hacker to use [collect] every once in a while.”
Facebook corporate network hack discovered by security researcher | Technology | The Guardian
