NordVPN Has Ties With A Data Mining Company When sending a specific request to a NordVPN endpoint, users could find another user’s email address, currency, payment URL and among other information. On December 4th 2019, a user submitted a bug report alerting NordVPN that user account information, including payment details, could be accessed using a simple POST request. Ironic because they promote encryption, lol. Announced in this official NordVPN video, they “now encrypt the hard disk of each new server”. You'd think this is a basic practice that all providers should do, but for some odd reason, they didn't. Moreover, adding to the dumpster fire this incident was, NordVPN didn't even encrypt the hard disks of their VPN servers. For their sake, I will not be mentioning the person who handed me the document, but I can confirm that the auditors did not find any vulnerabilities.
#Nordvpn premium account hacked 2018 full#
Sadly, NordVPN took down the full audit PDF, which used to be available here, but a source was able to provide me the full audit. What's funny, however, is how NordVPN was audited before they announced the breach, yet the auditors did not find out about the data leak. The exposure of this key meant that a malicious entity could have accessed sensitive user data, such as internet traffic logs. Nord had inadequate security measures which lead to them exposing this internal private key. It first emerged that NordVPN had an expired internal private key exposed, potentially allowing anyone to spin out their own servers imitating NordVPN. The admission comes following rumors that the company had been breached. They didn’t announce this until the next year.
Not many people know about this, but NordVPN was compromised back in 2018. Why You Should Stay The Fuck Away NordVPN Was Hacked What if I told you NordVPN isn’t who they claim to be? Disclaimer: This post is not sponsored by any company or entity. They’re basically the most well-known VPN out there right now due to their huge marketing budget. Ever heard of the name, “NordVPN”? I’m sure you have because they advertise like crazy using YouTubers and real-life ads to gain exposure.
0 kommentar(er)
